ClientHello 'splitting' to handle PSK binders

1 files changed, 12 insertions, 0 deletions

diff --git a/crypto/src/tls/TlsProtocol.cs b/crypto/src/tls/TlsProtocol.cs
index 044fca42d..d4960e3c8 100644
--- a/crypto/src/tls/TlsProtocol.cs
+++ b/crypto/src/tls/TlsProtocol.cs
@@ -947,11 +947,23 @@ namespace Org.BouncyCastle.Tls
             short type = TlsUtilities.ReadUint8(buf, off);
             switch (type)
             {
+            /*
+             * These message types aren't included in the transcript.
+             */
             case HandshakeType.hello_request:
             case HandshakeType.key_update:
             case HandshakeType.new_session_ticket:
                 break;
 
+            /*
+             * These message types are deferred to the writer to explicitly update the transcript.
+             */
+            case HandshakeType.client_hello:
+                break;
+
+            /*
+             * For all others we automatically update the transcript. 
+             */
             default:
             {
                 m_handshakeHash.Update(buf, off, len);