Tag Info

New answers tagged


The MAC algorithms used in TLS (and the older SSL) cipher suites have historically been HMAC, with the hash function used in the HMAC specified in the cipher suite. HMAC is very widely used and described so I won't repeat the full description of it here, but it essentially hashes all the data in messages being sent to and from the webserver, combining the ...


Ciphers don't use signature schemes. They do use MACs, which are different (and employ HMAC variants of hash functions, e.g. HMAC-SHA1). There is no danger in using SHA1 in this manner (or MD5 either, but I wouldn't advise doing that if you can avoid it). TLS 1.0 and TLS 1.1 also use SHA1 and MD5 internally, but this is still considered secure because they ...

Top 50 recent answers are included