Reading the latest TLS weakness, it seems that multiple weaknesses have been found over the years caused by not ensuring that messages are sent over the same channel, and in general a lack of cryptographic bindings between messages and layers.

I wonder if there is some general rule in all of this. For example if data is encrypted inside an encrypted channel, should for example the key material for the two be bound somehow?

  • 1
    $\begingroup$ I think in the case of your example, the key material should be generated independently, but could be cross authenticated against eachother (via signature) $\endgroup$ – Richie Frame Mar 25 '14 at 4:22

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.