In Section 7.1, the document says:
4. finished_secret = HKDF-Expand-Label(xSS,
"finished secret",
handshake_hash, L)
5. resumption_secret = HKDF-Expand-Label(master_secret,
"resumption master secret"
session_hash, L)
Why don't we use the master_secret in both the finished_secret and the
resumption_secret formula?
Russ
_______________________________________________
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls
