Re: [TLS] TLS renegotiation issue

[Nicolas Williams <Nicolas.Williams at sun.com>]

On Thu, Nov 05, 2009 at 06:38:10PM +0100, Martin Rex wrote:
> The "secure random challenges" in a TLS handshake that protect
> agains replay are the client.random and server.random.
> Admittedly they're larger (2*32 octets, fixed size) than the
> finished message (usually 12 octets, but depends on ciphersuite
> according to rfc5246 7.4.9.)
> 
> The client.random and server.random of a connection are already
> part of the official SecurityParameters (rfc5246 6.1.), but
> the finished message is not.

Guess what: the finished messages will have to become something that TLS
implementations export to applications.  There's no two ways about it
folks.

Nico
--