40
edits
User:Eskuat/WeeklyReports: Difference between revisions
m
→Coding part Week #1 (May, 23 - 30)
| Line 9: | Line 9: | ||
#The MD5/SHA-1 combination in the pseudorandom function (PRF) has been replaced with cipher-suite-specified PRFs. All cipher suites in this document use P_SHA256. | #The MD5/SHA-1 combination in the pseudorandom function (PRF) has been replaced with cipher-suite-specified PRFs. All cipher suites in this document use P_SHA256. | ||
#The MD5/SHA-1 combination in the digitally-signed element has been replaced with a single hash. Signed elements now include a field that explicitly specifies the hash algorithm used.<br> | #The MD5/SHA-1 combination in the digitally-signed element has been replaced with a single hash. Signed elements now include a field that explicitly specifies the hash algorithm used.<br> | ||
#Substantial cleanup to the client's and server's ability to | #Substantial cleanup to the client's and server's ability to specify which hash and signature algorithms they will accept. Note that this also relaxes some of the constraints on signature and hash algorithms from previous versions of TLS (Signature algorithms extension).<br> | ||
#Addition of support for authenticated encryption with additional | #Addition of support for authenticated encryption with additional data modes.<br> | ||
#TLS Extensions definition and AES Cipher Suites were merged in | #TLS Extensions definition and AES Cipher Suites were merged in from external [TLSEXT] and [TLSAES].<br> | ||
#Tighter checking of EncryptedPreMasterSecret version numbers.<br> | #Tighter checking of EncryptedPreMasterSecret version numbers.<br> | ||
#Tightened up a number of requirements.<br> | #Tightened up a number of requirements.<br> | ||
#Verify_data length now depends on the cipher suite (default is | #Verify_data length now depends on the cipher suite (default is still 12).<br> | ||
#Alerts MUST now be sent in many cases.<br> | #Alerts MUST now be sent in many cases.<br> | ||
#TLS_RSA_WITH_AES_128_CBC_SHA is now the mandatory to implement<br> cipher suite. Added HMAC-SHA256 cipher suites. Removed IDEA and DES cipher suites. They are now deprecated and will be documented in a separate document. | #TLS_RSA_WITH_AES_128_CBC_SHA is now the mandatory to implement<br> cipher suite. Added HMAC-SHA256 cipher suites. Removed IDEA and DES cipher suites. They are now deprecated and will be documented in a separate document. | ||