Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

Reading the latest TLS weakness, it seems that multiple weaknesses have been found over the years caused by not ensuring that messages are sent over the same channel, and in general a lack of cryptographic bindings between messages and layers.

I wonder if there is some general rule in all of this. For example if data is encrypted inside an encrypted channel, should for example the key material for the two be bound somehow?

share|improve this question
1  
I think in the case of your example, the key material should be generated independently, but could be cross authenticated against eachother (via signature) –  Richie Frame Mar 25 at 4:22

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.