I'm testing a scenario where 2 applications residing on 2 separate windows 2012r2 servers are opening N concurrent TLS1.2 mutual authentication sessions (using different certificates for the client authentication part) to the same server.
Due to the fact that all sessions are going through the same Schannel modules at client side as well at server side, I was wondering if it might be possible that the N sessions (or a subset) might be ending up sharing / using the same cryptographic material (i.e symmetric session keys) in a CPU processing optimization solution at server / client side.
Should this be the case, what would be the best way to verify this ?
I've tried to check in the RFC but I'm not 100% sure what is the expected protocol behavior under these specific circumstances.
Hope the description makes sense.
Thanks,