RFC 5216, "The EAP-TLS Authentication Protocol", March 2008

Note: This RFC has been updated by RFC 8996, RFC 9190

Errata ID: 1391
Status: Held for Document Update
Type: Editorial
Publication Format(s) : TEXT
Reported By: Alfred Hoenes
Date Reported: 2008-03-26
Held for Document Update by: Pasi Eronen

Section 2.3,pg.17 says:

   master_secret = TLS-PRF-48(pre_master_secret, "master secret",
|                   client.random || server.random) key_block     =
|  TLS-PRF-X(master_secret, "key expansion",
                    server.random || client.random)

It should say:

   master_secret = TLS-PRF-48(pre_master_secret, "master secret",
|                   client.random || server.random)
|  key_block     = TLS-PRF-X(master_secret, "key expansion",
                    server.random || client.random)

Notes:

Wrong line break makes formula presentation confusing.

(This flaw has been introduced in a last-minute change
before publication!)

Report New Errata