For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

KT_271103's avatar
KT_271103
Icon for Nimbostratus rankNimbostratus
Jul 27, 2016

SSL key generation method

Please clear below questions?   Pre-master key derived from already shared random numbers through initial handshake process. Is it correct? How master key is generating from pre-master key on both...
application delivery
Secure Web Gateway
security
WebSafe
KT_271103's avatar
KT_271103
Icon for Nimbostratus rankNimbostratus
Jul 28, 2016

Hi Kevin, Thanks for the RFC. Checked below

Computing the Master Secret For all key exchange methods, the same algorithm is used to convert the pre_master_secret into the master_secret. The pre_master_secret should be deleted from memory once the master_secret has been computed.

  master_secret = PRF(pre_master_secret, "master secret",
                      ClientHello.random + ServerHello.random)
                      [0..47];

I could not understand above formula. It is included master secret also then 0..47? Is there for better understanding?