Tag Info

New answers tagged


This is a trickier question than you might think. The first thing to note is that your scheme doesn't respect record boundaries. TLS 1.2 seems to have been rewritten to use a random IV for CBC mode encryption for each record (to avoid certain attacks). It is therefore likely that the idea of TLS 1.2 is to respect record boundaries. The document "AES Galois ...


I just quickly read the TLS specification and the document that introduces GCM into TLS. It is stated in the definition of GCM-ciphersuites that a 12-byte nonce is supplied (8 bytes per packet and 4 bytes from the handshake, as you correctly stated). First I'd like to say: Very often there's a (very good) reason why a decision was made (like here) in ...

Top 50 recent answers are included