Add some TODOs related to draft-josefsson-salsa20-tls-02

1 files changed, 9 insertions, 0 deletions

diff --git a/core/src/main/java/org/bouncycastle/crypto/tls/TlsMac.java b/core/src/main/java/org/bouncycastle/crypto/tls/TlsMac.java
index e720d08d..20dfef89 100644
--- a/core/src/main/java/org/bouncycastle/crypto/tls/TlsMac.java
+++ b/core/src/main/java/org/bouncycastle/crypto/tls/TlsMac.java
@@ -105,6 +105,15 @@ public class TlsMac
      */
     public byte[] calculateMac(long seqNo, short type, byte[] message, int offset, int length)
     {
+        /*
+         * TODO[draft-josefsson-salsa20-tls-02] 3. Moreover, in order to accommodate MAC algorithms
+         * like UMAC that require a nonce as part of their operation, the document extends the MAC
+         * algorithm as specified in the TLS protocol. The extended MAC includes a nonce as a second
+         * parameter. MAC algorithms that do not require a nonce, such as HMAC, are assumed to
+         * ignore the nonce input value. The MAC in a GenericStreamCipher is then calculated as
+         * follows.
+         */
+
         ProtocolVersion serverVersion = context.getServerVersion();
         boolean isSSL = serverVersion.isSSL();