HMAC used to secure chosen cipher-text attacks. if we are encrypting a large file (video) and sending it over TLS for decryption, how server can check MAC for ciphertext when we didn't sent whole of ciphertext yet ?
- Anybody can ask a question
- Anybody can answer
- The best answers are voted up and rise to the top
Well, when TLS encrypts a stream of traffic, it breaks up the data into records. Each record contains up to 16k of data, and includes its own HMAC. Hence, there is no HMAC over the entire downloaded file; instead, there are a series of HMACs; every single byte of data is covered by one of those HMACs.