From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Tue, 15 Feb 2011 21:29:16 +0000 (+0100)
Subject: Added fixme note on TLS 1.2 PRF per ciphersuite.
X-Git-Tag: gnutls_2_99_0~266
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c4aee5f0640a60f18f116491b4f6032e49014273;p=thirdparty%2Fgnutls.git

Added fixme note on TLS 1.2 PRF per ciphersuite.
---

diff --git a/lib/gnutls_algorithms.c b/lib/gnutls_algorithms.c
index 9b707558c0..7c0bf91b54 100644
--- a/lib/gnutls_algorithms.c
+++ b/lib/gnutls_algorithms.c
@@ -524,6 +524,11 @@ typedef struct
 
 #define CIPHER_SUITES_COUNT sizeof(cs_algorithms)/sizeof(gnutls_cipher_suite_entry)-1
 
+/* FIXME: what we don't handle here is TLS 1.2 requirement
+ * that each ciphersuite has it's own PRF algorithm. Now we
+ * assume that each one uses the SHA-256 PRF in TLS 1.2.
+ */
+
 static const gnutls_cipher_suite_entry cs_algorithms[] = {
   /* ANON_DH */
   GNUTLS_CIPHER_SUITE_ENTRY (GNUTLS_ANON_DH_ARCFOUR_MD5,