When A Session Is Resumed, Which Of The Following Cryptographic Secrets Need To B
Question:
When a session is resumed, which of the following cryptographic secrets need to be recalculated?
(i) Pre-Master secret
(ii) Master secret
(iii) Authentication keys
(iv) Encryp1ion keys
(v) IVs
Answer:
1) Pre-master secret and
2) Master Secret
If an end-user reconnects to a server withing a short time frame, In the client hello, the client identifies itself with the session-id previously issued to it by the server, and by returning this session-id in the server hello, the server implicitly agrees to use an abbreviated handshake. The master secret from the original connection is cached by both sides. The abbreviated handshake skips the need for the server to decrypt the client key exchange message to obtain the pre-master secret.
Incase the duration is long and client is trying to connect after a long gap ,the information on server might have been cached than Pre-master and master secret needs to be recalculated
