Re: [TLS] Computation of static secret in anonymous DH

2015-07-31 Thread Nico Williams
On Fri, Jul 31, 2015 at 07:42:12PM +0300, Ilari Liusvaara wrote: > On Fri, Jun 26, 2015 at 01:41:29PM -0500, Nico Williams wrote: > > tls-unique depends on the Finished message strongly binding the entire > > transcript up to that point. I find this elegant (despite the > > resumption problem, whi

Re: [TLS] Computation of static secret in anonymous DH

2015-07-31 Thread Ilari Liusvaara
On Fri, Jun 26, 2015 at 01:41:29PM -0500, Nico Williams wrote: > > tls-unique depends on the Finished message strongly binding the entire > transcript up to that point. I find this elegant (despite the > resumption problem, which anyways, should be fixed by the session hash) > and easy to underst