关于EAP-TLS协议的技术共享

a, HMAC_hash(K, m) = hash((K ^ opad) + hash((K ^ ipad) + m))
    K 密钥
    m 被保护数据
    ^ 异或
    + 串接
b, P_hash(secret, seed) = HMAC_hash(secret, A(1) + seed) + HMAC_hash(secret, A(2) + seed) + HMAC_hash(secret, A(3) + seed) + ...
    A(0) = seed 
    A(i) = HMAC_hash(secret, A(i-1))
c, PRF(secret, label, seed) = P_hash1(S1, label + seed) ^ P_hash2(S2, label + seed)

1, master_secret = PRF(pre_master_secret, "master secret", ClientHello.random + ServerHello.random)
2, key_block = PRF(master_secret, "key expansion",  ClientHello.random + ServerHello.random)
    client_write_MAC_key[hash_length]
    server_write_MAC_key[hash_length]
    client_write_key[key_length]
    server_write_key[key_length]
    client_write_IV[iv_length]
    server_write_IV[iv_length]
3, PRF(master_secret, "client finished", Hash(handshake_messages))
4, PRF(master_secret, "server finished", Hash(handshake_messages))