Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Reading the latest TLS weakness, it seems that multiple weaknesses have been found over the years caused by not ensuring that messages are sent over the same channel, and in general a lack of cryptographic bindings between messages and layers.

I wonder if there is some general rule in all of this. For example if data is encrypted inside an encrypted channel, should for example the key material for the two be bound somehow?

share|improve this question
I think in the case of your example, the key material should be generated independently, but could be cross authenticated against eachother (via signature) – Richie Frame Mar 25 '14 at 4:22

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.