40
edits
| Line 9: | Line 9: | ||
#The MD5/SHA-1 combination in the pseudorandom function (PRF) has been replaced with cipher-suite-specified PRFs. All cipher suites in this document use P_SHA256. | #The MD5/SHA-1 combination in the pseudorandom function (PRF) has been replaced with cipher-suite-specified PRFs. All cipher suites in this document use P_SHA256. | ||
#The MD5/SHA-1 combination in the digitally-signed element has been replaced with a single hash. Signed elements now include a field that explicitly specifies the hash algorithm used.<br> | #The MD5/SHA-1 combination in the digitally-signed element has been replaced with a single hash. Signed elements now include a field that explicitly specifies the hash algorithm used.<br> | ||
#Substantial cleanup to the client's and server's ability to<br> specify which hash and signature algorithms they will accept.<br> Note that this also relaxes some of the constraints on signature<br> and hash algorithms from previous versions of TLS. | #Substantial cleanup to the client's and server's ability to<br> specify which hash and signature algorithms they will accept.<br> Note that this also relaxes some of the constraints on signature<br> and hash algorithms from previous versions of TLS.<br> | ||
#Addition of support for authenticated encryption with additional<br> data modes.<br> | #Addition of support for authenticated encryption with additional<br> data modes.<br> | ||
#TLS Extensions definition and AES Cipher Suites were merged in<br> from external [TLSEXT] and [TLSAES].<br> | #TLS Extensions definition and AES Cipher Suites were merged in<br> from external [TLSEXT] and [TLSAES].<br> | ||
edits