Add calls to TlsHandshakeHash.stopTracking()

Add TODOs to reconsider how the server calculates the CertificateVerify
handshake hash for TLS 1.2

1 files changed, 5 insertions, 15 deletions

diff --git a/core/src/main/java/org/bouncycastle/crypto/tls/DeferredHash.java b/core/src/main/java/org/bouncycastle/crypto/tls/DeferredHash.java
index 9736d2e1..e7cf554f 100644
--- a/core/src/main/java/org/bouncycastle/crypto/tls/DeferredHash.java
+++ b/core/src/main/java/org/bouncycastle/crypto/tls/DeferredHash.java
@@ -65,25 +65,15 @@ class DeferredHash
         checkStopBuffering();
     }
 
-    public void keepHashAlgorithms(short[] hashAlgorithms)
+    public void stopTracking()
     {
-        Hashtable kept = new Hashtable();
-
-        Enumeration e = hashes.keys();
-        while (e.hasMoreElements())
+        if (hashes.size() > 1)
         {
-            Short key = (Short)e.nextElement();
-            short hashAlgorithm = key.shortValue();
-
-            if (hashAlgorithm == prfHashAlgorithm.shortValue()
-                || TlsProtocol.arrayContains(hashAlgorithms, hashAlgorithm))
-            {
-                kept.put(key, hashes.get(key));
-            }
+            Digest prfHash = (Digest)hashes.get(prfHashAlgorithm);
+            hashes = new Hashtable();
+            hashes.put(prfHashAlgorithm, prfHash);
         }
 
-        this.hashes = kept;
-
         checkStopBuffering();
     }