Re: [TLS] merging recent ideas into one new proposal

[Martin Rex <mrex at sap.com>]

What I forgot about the verify_data in the Hello.Randoms:

We only carry the initial 12 bytes -- which is the standard size
for TLSv1.0 and TLSv1.1 and the default size for TLSv1.2.

For SSLv3, where the Finished message is actually a concatenation
of two HMAs md5 and sha1 (I believe it is an HMAC-like thingy) we
would carry the first 12 bytes of the sha-1 HMAC as verify_data.

-Martin