Re: [TLS] Computation of static secret in anonymous DH

2015-07-31 Thread Nico Williams
On Fri, Jul 31, 2015 at 07:42:12PM +0300, Ilari Liusvaara wrote: On Fri, Jun 26, 2015 at 01:41:29PM -0500, Nico Williams wrote: tls-unique depends on the Finished message strongly binding the entire transcript up to that point. I find this elegant (despite the resumption problem, which

Re: [TLS] Computation of static secret in anonymous DH

2015-07-31 Thread Ilari Liusvaara
On Fri, Jun 26, 2015 at 01:41:29PM -0500, Nico Williams wrote: tls-unique depends on the Finished message strongly binding the entire transcript up to that point. I find this elegant (despite the resumption problem, which anyways, should be fixed by the session hash) and easy to understand