RE: [TLS] Truncated HMAC

["Blumenthal, Uri" <uri.blumenthal@xxxxxxxxx>]

>> It simply means that the *final output* of HMAC would be truncated to
10
>> bytes - but *not* that its input or key would be truncated in any
way.
>
>Then I would propose changing "CipherSpec.hash_size" to 
>CipherSpec.mac_length so that "hash_size" does not have
>two related but different meanings.

You see, strictly speaking it's the MAC size (output of HMAC) that gets
truncated, not the hash size.

I agree though that some clarification would be helpful.

_______________________________________________
TLS mailing list
TLS@xxxxxxxxxxxxxx
https://www1.ietf.org/mailman/listinfo/tls