[TLS] [Errata Rejected] RFC2246 (3481)

RFC Errata System <rfc-editor@rfc-editor.org> Thu, 08 May 2014 16:27 UTC

Return-Path: <wwwrun@rfc-editor.org>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ABAB01A005E; Thu, 8 May 2014 09:27:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.553
X-Spam-Level:
X-Spam-Status: No, score=-102.553 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.651, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6awVsC_FYffF; Thu, 8 May 2014 09:27:17 -0700 (PDT)
Received: from rfc-editor.org (rfc-editor.org [IPv6:2001:1900:3001:11::31]) by ietfa.amsl.com (Postfix) with ESMTP id BF88B1A005A; Thu, 8 May 2014 09:27:17 -0700 (PDT)
Received: by rfc-editor.org (Postfix, from userid 30) id 81FEB180014; Thu, 8 May 2014 09:26:35 -0700 (PDT)
To: mrex@sap.com, tdierks@certicom.com, pck@netcom.com, relyea@netscape.com, jar@netscape.com, msabin@netcom.com, dansimon@microsoft.com, tomw@netscape.com, hugo@watson.ibm.com
X-PHP-Originating-Script: 1005:errata_mail_lib.php
From: RFC Errata System <rfc-editor@rfc-editor.org>
Message-Id: <20140508162635.81FEB180014@rfc-editor.org>
Date: Thu, 8 May 2014 09:26:35 -0700 (PDT)
Archived-At: http://mailarchive.ietf.org/arch/msg/tls/rsTXm36XmlcekTFPbq5lLk-QvRA
X-Mailman-Approved-At: Sun, 18 May 2014 21:05:55 -0700
Cc: tls@ietf.org, rfc-editor@rfc-editor.org, iesg@ietf.org
Subject: [TLS] [Errata Rejected] RFC2246 (3481)
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 08 May 2014 16:27:19 -0000

The following errata report has been rejected for RFC2246,
"The TLS Protocol Version 1.0".

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata_search.php?rfc=2246&eid=3481

--------------------------------------
Status: Rejected
Type: Technical

Reported by: Martin Rex <mrex@sap.com>
Date Reported: 2013-02-08
Rejected by: Stephen Farrell (IESG)

Section: 8.1.2

Original Text
-------------
8.1.2. Diffie-Hellman

   A conventional Diffie-Hellman computation is performed. The
   negotiated key (Z) is used as the pre_master_secret, and is converted
   into the master_secret, as specified above.


Corrected Text
--------------
8.1.2. Diffie-Hellman

   A conventional Diffie-Hellman computation is performed.  The
   negotiated key (Z) is used as the pre_master_secret, and is converted
   into the master_secret, as specified above.  Leading bytes of Z that
   contain all zero bits are stripped before it is used as the
   pre_master_secret.


Notes
-----
Adopting the clarification from rfc4346 Section 8.1.2.  Not stripping the leading zero bits of Z will cause interop problems (handshake failures) with the installed base.  Rfc2246 is still the authoritative spec for TLSv1.0.  One can not implement TLSv1.0 from rfc4346.
 --VERIFIER NOTES-- 
We don't post errata for things fixed when an RFC is obsoleted.

--------------------------------------
RFC2246 (no draft string recorded)
--------------------------------------
Title               : The TLS Protocol Version 1.0
Publication Date    : January 1999
Author(s)           : T. Dierks, C. Allen
Category            : PROPOSED STANDARD
Source              : Transport Layer Security
Area                : Security
Stream              : IETF
Verifying Party     : IESG