On Wed, Dec 13, 2006 at 08:45:50PM +0100, Marek Marcola wrote:
> Hello,
> >     H = HMAC(packet_proto+ssl_version+data_len+M, server_write_mac)
> Should be:
> H = HMAC(packet_sequence+packet_proto+ssl_version+data_len+M,
> server_write_mac)
> 

Marek,

        You forgot to mention that HMAC has a secret key associated with it so 
that you cannot forge MD5 or SHA1 digests.

        This is done by simply appending the key to the digest input.

regards,
Girish
-- 
Linux is for folks who hate Windoze.

FreeBSD is for folks who love UNIX.

OpenBSD is for folks who can't live without UNIX.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to