February 5, 2002
Practical Aspects of Modern Cryptography
16
Phase 5: Authenticate previously exchanged data
n“Change ciphersuites” message
nTime to start sending data for real...
n“Finished” handshake message
nFirst protected message, verifies algorithm parameters for the encrypted channel
n12 bytes from:
PRF(master_secret, “client finished”, MD5(handshake_messages) +
SHA-1(handshake_messages))