I have to ask why the continued insistence on calling the thing that forms part of the nonce an "IV". I find it to be misleading.
Also, it might be worth noting that the string "early data key expansion, server write " is never needed. On 16 November 2015 at 17:25, Eric Rescorla <e...@rtfm.com> wrote: > https://github.com/tlswg/tls13-spec/pull/346 > > As discussed in Seattle and Yokohama, I've broken out the traffic key > generation > into individual values. This makes life somewhat easier for those dealing > the > cryptographic modules, because some of this data needs to be public and some > of it needs to be secret. > > This general change already had consensus, so I plan to merge it on > Wednesday > modulo major objections. Please advise here or on Github if you find any > errors > or you violently object. > > -Ekr > > > > _______________________________________________ > TLS mailing list > TLS@ietf.org > https://www.ietf.org/mailman/listinfo/tls > _______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls
