← Prev in month ← Prev in thread

Proposed changes to TLS 1.2 mechanisms

From
Wan-Teh Chang
Date
2013-09-17T14:53:00+00:00
ID
Thread
Proposed changes to TLS 1.2 mechanisms
Hi, The attached document shows my proposed changes to the TLS 1.2 mechanims proposal.
I discussed these changes with Bob Relyea and Michael StJohns yesterday and got their approval.
Summary of changes:
1. Move the new "prfHashMechanism" field to the end of the parameter structures.
Resurrect the obsolete "bIsExport" field (a CK_BBOOL).
Rationale: this allows (but does not require) a PKCS #11 provider or consumer to use the new parameter structures as extended versions of the old parameter structures, sharing more code.
2. Merge the three TLS MAC mechanisms into one (CKM_TLS12_MAC, renamed CKM_TLS_MAC).
Rationale: this reduces the number of mechanisms and matches the design of CKM_TLS_KDF.
Wan-Teh Attachment: TLS12-wtcrev-2.doc Description: MS-Word document
← Prev in month ← Prev in thread