Has anything changed in the implementation of gnutls_session_get_master_secret() in recent GnuTLS versions? I'm getting a consistent all-zeroes result under 3.6.7 (for a TLS1.3 session), called soon after gnutls_handshake() returns. -- Thanks, Jeremy