Note - I know SSLv3 is dangerous but that is why I am using it to do demo of POODLE attack using server and client written in python.
So the question is I am using "ECDHE-RSA-AES128-SHA" cipher for connection between client and server.I also implemented the MITM(Man-In-The-Middle) proxy for connection. And when I am seeing the size of data being transmitted for every message then it is not multiple of 16 bytes.
Data is of like something structure ---
header with 5 bytes -- "\x17\x03\x00\x00 " (yes there is space in the end) and the remaining encrypted data.Amusingly the new data length by subtracting these 5 bytes is still not multiple of 16.
For single letter messages the size of data transmitted after encryption is 74 bytes(including that 5 byte header which never changes). And as soon as the message becomes more than 11 characters one block of 16 bytes is added so now the size becomes 90 bytes.
Isn't the size supposed to be the multiple of block size? So what is actually the structure of data being transmitted .
Note - I am using ssl.wrap_socket method to create ssl socket