Re: [TLS] Record layer corner cases

> o  When using Diffie-Hellman key exchange, do you correctly strip
>    leading zero bytes from the negotiated key (see Section 8.1.2)? 
>    If you don't, roughly once out of 256 connection attempts will fail.

On a related note, my large integer code prepends a leading zero byte
if the most significant bit is a one to prevent it from appearing to
be negative.  So when transferring the Diffie-Hellman p, g, Ys, and
Yc, they might have a leading zero byte.  I haven't noticed any
problems with this, but wondered if this should be clarified to
either always do it, never do it, or leave it up to the implementer.

Mike

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls