2
$\begingroup$

As described in the SSH RFC an initial IV to server, initial IV to client, encryption key client to server, encryption key server to client, integrity key client to server, and an integrity key server to client are generated.

Does TLS use a similar system? If not, Why doesn't TLS use a system like this?

$\endgroup$
2

1 Answer 1

2
$\begingroup$

Why doesn't TLS use a system like this?

TLS does have separate client-to-server and server-to-client keys - it always has, and that has not changed in any published version of TLS or SSL.

What makes you think it doesn't?

$\endgroup$
2
  • $\begingroup$ This comment. $\endgroup$
    – fgrieu
    Mar 8, 2022 at 14:03
  • $\begingroup$ Yes it was that comment. Change the title so it hopefully doesn't confuse others. $\endgroup$
    – nilch
    Mar 8, 2022 at 16:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.