SSL (Secure Sockets Layer) and its successor TLS (Transport Layer Security) are protocols which provide communication security (privacy and integrity) for a bidirectional data channel.
-1
votes
1answer
75 views
Which keys are necessary to decrypt Application data in a SSL connection?
I'm debugging an application which communicates between client and server using a SSL/TLS connection, and want to capture and analyze the sent data.
Are the client write keys and server write keys ...
4
votes
0answers
235 views
Why do new versions of TLS use an explicit IV for CBC suites?
SSL 3.0 and TLS 1.0 used an insecure scheme to generate implicit IVs when encrypting records in CBC mode: They used the last part of the previous record, a value that can be predicted by the attacker. ...
3
votes
0answers
46 views
Why is TLS SRP verifier based on user name?
I don't understand why TLS SRP (or SRP in general) includes the user name in verifier calculation, given that user name is basically public.
From spec RFC 5054 $x$, which is then used to calculate ...
0
votes
0answers
39 views
How can I tell what symmetric algorithm my browser is using?
I'd like to learn more about how hard it is to break and decrypt stored HTTPS (SSL) traffic. Apparently it depends on which symmetric algorithm was chosen during the SSL handshake. How can I find out ...
0
votes
0answers
176 views
Cryptographic Protocol using NaCL
Why?
I wanted to add some security and privacy to a chat-type server for playing various games (with a few things that are done on the server to limit cheating). Going by the "Don't implement ...
