IETF Logo Mail Archive

Re: [TLS] MS14-066 and the TLS premaster secret version check

Andrei Popov <Andrei.Popov@microsoft.com> Tue, 25 November 2014 23:43 UTC

Return-Path: <Andrei.Popov@microsoft.com>
X-Original-To: tls@ietfa.amsl.com
Delivered-To: tls@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5DC021A6EEF for <tls@ietfa.amsl.com>; Tue, 25 Nov 2014 15:43:28 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.902
X-Spam-Level:
X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t8L4aCfTGFIc for <tls@ietfa.amsl.com>; Tue, 25 Nov 2014 15:43:26 -0800 (PST)
Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1bon0751.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::1:751]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 61C871A0358 for <tls@ietf.org>; Tue, 25 Nov 2014 15:43:26 -0800 (PST)
Received: from BN3PR0301MB1250.namprd03.prod.outlook.com (25.161.207.26) by BN3PR0301MB1249.namprd03.prod.outlook.com (25.161.207.25) with Microsoft SMTP Server (TLS) id 15.1.26.15; Tue, 25 Nov 2014 23:43:03 +0000
Received: from BN3PR0301MB1250.namprd03.prod.outlook.com ([25.161.207.26]) by BN3PR0301MB1250.namprd03.prod.outlook.com ([25.161.207.26]) with mapi id 15.01.0026.003; Tue, 25 Nov 2014 23:43:03 +0000
From: Andrei Popov <Andrei.Popov@microsoft.com>
To: Yuhong Bao <yuhongbao_386@hotmail.com>, "tls@ietf.org" <tls@ietf.org>, "mrex@sap.com" <mrex@sap.com>
Thread-Topic: [TLS] MS14-066 and the TLS premaster secret version check
Thread-Index: AQHQCKANe9uQDUMNukKycgPp/+r+z5xxrSOg
Date: Tue, 25 Nov 2014 23:43:03 +0000
Message-ID: <BN3PR0301MB12502D23F123924A138DB3F48C730@BN3PR0301MB1250.namprd03.prod.outlook.com>
References: <BLU177-W41509B9090B70F71C074CAC3730@phx.gbl>
In-Reply-To: <BLU177-W41509B9090B70F71C074CAC3730@phx.gbl>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [2001:4898:80e8:ed31::2]
x-microsoft-antispam: BCL:0;PCL:0;RULEID:;SRVR:BN3PR0301MB1249;
x-exchange-antispam-report-test: UriScan:;
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:; SRVR:BN3PR0301MB1249;
x-forefront-prvs: 040655413E
x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(189002)(377454003)(13464003)(199003)(76176999)(54606007)(50986999)(54356999)(4396001)(46102003)(54206007)(99286002)(95666004)(106356001)(15202345003)(74316001)(107886001)(107046002)(99396003)(120916001)(77096003)(62966003)(122556002)(77156002)(106116001)(105586002)(40100003)(86362001)(20776003)(92726001)(92566001)(31966008)(2201001)(2501002)(2656002)(33656002)(64706001)(87936001)(101416001)(76576001)(86612001)(97736003)(15975445006)(19580395003)(19580405001)(21056001)(7059030)(219293001)(3826002); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR0301MB1249; H:BN3PR0301MB1250.namprd03.prod.outlook.com; FPR:; SPF:None; MLV:sfv; PTR:InfoNoRecords; MX:1; A:1; LANG:en;
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: microsoft.onmicrosoft.com
Archived-At: http://mailarchive.ietf.org/arch/msg/tls/ysX7ReTt1mUXfvkP1MzUEox7sdg
Subject: Re: [TLS] MS14-066 and the TLS premaster secret version check
X-BeenThere: tls@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/tls>, <mailto:tls-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/tls/>
List-Post: <mailto:tls@ietf.org>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/tls>, <mailto:tls-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 25 Nov 2014 23:43:29 -0000

Hi Yuhong,

The interop problem related to premaster secret version check is resolved in Win8 and above.

MS14-066 is not related: it fixes a few security issues we found internally.

Cheers,

Andrei

-----Original Message-----
From: TLS [mailto:tls-bounces@ietf.org] On Behalf Of Yuhong Bao
Sent: Tuesday, November 25, 2014 3:07 AM
To: tls@ietf.org; mrex@sap.com
Subject: [TLS] MS14-066 and the TLS premaster secret version check

Has the incorrect premaster secret version check described in this been fixed in MS14-066:
http://www.ietf.org/mail-archive/web/tls/current/msg08139.html

Yuhong Bao 		 	   		  
_______________________________________________
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls

v2.27.8 | Report a Bug | By Email | System Status