Re: [TLS] Serious crypto problem fixed by envelope HMAC method instead of currently used prefix

[Eric Rescorla <ekr@xxxxxxxxxxxxxxxxxxxx>]

"Omirjan Batyrbaev" <batyr@xxxxxxxxxxxx> writes:

> Hi Eric,
> I've seen the TLS reference to the "Request for Comments: 2104" so this is
> (probably) the HMAC used in TLS. Quoting to be on the same page:
> "To compute HMAC over the data `text' we perform
>                     H(K XOR opad, H(K XOR ipad, text))"
>
> However, this RFC was produced in 1997 but SSL was from 1995 (or earlier?).
> Do you know which HMAC they used in say SSL v3 and v2 (which is still an
> option in my browser, etc.)?

SSLv3 used a variant of the original HMAC (pre-2104). IIRC, SSLv2
didn't use HMAC and *did* have an extension attack, but that's
hardly our problem at this point.

-Ekr



_______________________________________________
TLS mailing list
TLS@xxxxxxxxxxxxxx
https://www1.ietf.org/mailman/listinfo/tls