Timeline for In SSL/TLS, what part of a data packet is Encrypted and Authenticated?
Current License: CC BY-SA 3.0
10 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 7, 2021 at 6:58 | history | edited | CommunityBot |
replaced http://tools.ietf.org/html/rfc with https://www.rfc-editor.org/rfc/rfc
|
|
| Apr 4, 2014 at 16:39 | vote | accept | Eddie | ||
| Apr 4, 2014 at 7:37 | answer | added | Henrick Hellström | timeline score: 10 | |
| Apr 3, 2014 at 15:01 | comment | added | Eddie | Henrick, would you care to post an answer so I can mark yours as the right answer? I can't do that to a comment. (even if its just a copy and paste from your comment, so you can at least get the credit). | |
| Mar 30, 2014 at 4:59 | history | tweeted | twitter.com/#!/StackSecurity/status/450135246399619072 | ||
| Mar 30, 2014 at 0:53 | history | migrated | from crypto.stackexchange.com (revisions) | ||
| Mar 29, 2014 at 14:28 | comment | added | Henrick Hellström | AEAD datatracker.ietf.org/doc/rfc5246/?include_text=1 section 6.2.3.3. Your IV explanation seems adequate enough, but it depends on the context of course. | |
| Mar 29, 2014 at 14:21 | comment | added | Eddie | Could you tell me where in the RFC the changes to line 4 if an AEAD cipher is negotiated exist? I'd like to do some further reading. As for the IV, since a CBC cipher repeatedly performs an encryption computation using data from the last computation to 'seed' the current one, the IV simply provides a 'starting point' for that first computation. Would that suffice as a layman's explanation of why the IV is needed? | |
| Mar 29, 2014 at 8:41 | comment | added | Henrick Hellström | For TLS 1.0, this is correct. In TLS 1.1 (and later) you will also get an explicit IV between line 01 and 02 if a CBC mode cipher is negotiated. In TLS 1.2 an AEAD cipher might be negotiated, which means line 04 will depend on the cipher. | |
| Mar 29, 2014 at 0:33 | history | asked | Eddie | CC BY-SA 3.0 |