Re: [TLS] New drafts: adding input to the TLS master secret

[Paul Hoffman <[e-mail]>]

At 11:23 AM -0500 2/3/10, Marsh Ray wrote:
>Paul Hoffman wrote:
>> At 10:19 AM -0500 2/3/10, Marsh Ray wrote:
>>> I was thinking of TLS 1.0, since that's what seems to be mostly
>>> used.
>>
>> draft-hoffman-tls-master-secret-input explicitly says it is modifies
>> TLS 1.2.
>
>Oh, sorry I didn't see that wording.
>I guess it's the "Updates: 4347, 5246" part.

Ah, good call. I agree that this should be updating whatever comes out of draft-ietf-tls-rfc4347-bis-03, not 4347. I'll fix that in the -01.

> > Please say whether or not you think that there is a
> > cryptographic flaw in draft-hoffman-tls-master-secret-input that
> > applies to TLS 1.2. If there is, then there is probably an underlying
> > flaw in TLS 1.2 by itself, and that should be discussed seriously. I
> > suspect that there is not.
>
>I know of no flaw in TLS 1.2.

Whew. Good.


--Paul Hoffman, Director
--VPN Consortium