RE: [TLS] Issue 49: Finished.verify length

[<Pasi.Eronen at nokia.com>]

Eric Rescorla wrote:

> I'm still trying to understand the rationale for why it makes sense
> to have a verify_data != 12 bytes. Pasi, could you elaborate?

Again, I'm not suggesting changing it from 12 bytes; just allowing
the agility to change it in the future without new TLS version.

One (somewhat hypothetical) use would be a cipher suite that tries 
to have _everything_ at 256-bit security level (maybe for some 
government approval reasons; not today, but maybe 5 years from now).

You might argue that this kind of security level isn't really
needed, but then again, some people seem to be willing to go
to great lengths to match these "security levels" (just think
of SHA-224.. :-)

Best regards,
Pasi

_______________________________________________
TLS mailing list
TLS at lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls