See:
http://www.ietf.org/mail-archive/web/tls/current/msg17184.html

On Fri, Sep 4, 2015 at 8:27 AM, Russ Housley <hous...@vigilsec.com> wrote:

> In Section 7.1, the document says:
>
>      4. finished_secret = HKDF-Expand-Label(xSS,
>                                             "finished secret",
>                                             handshake_hash, L)
>
>      5. resumption_secret = HKDF-Expand-Label(master_secret,
>                                               "resumption master secret"
>                                               session_hash, L)
>
> Why don't we use the master_secret in both the finished_secret and the
> resumption_secret formula?
>
> Russ
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
>
_______________________________________________
TLS mailing list
TLS@ietf.org
https://www.ietf.org/mailman/listinfo/tls

Reply via email to