New answers tagged

3 votes
Accepted

Key Committing AES-GCM

do I understand correctly that $\mathcal{A}$ needs to be able to 'modify' the ciphertext $C$ to be able to perform the outlined attacks? No, these attacks assume that the attacker generates $C$; he ...
user avatar
  • 132k
1 vote

How SSL (similar version) works?

Diffie-Hellman is the short-term key here, what about the long-term key? The various meanings of various elements used within the protocol aren't explained; my best guess is that 'pass' is a password ...
user avatar
  • 132k
0 votes

Why does AES-GCM means No MAC key, instead of MAC key what they are going to use?

The AEADs are internally computing a hash value over the encrypted data. That hash is sent together with the encrypted data. Adding a second hash as MAC together with a MAC key would not provide more ...
user avatar
  • 136
2 votes
Accepted

RSASSA-PSS in TLS 1.2

If the client announces in the Signature Algorithm Extension that it supports one of the RSA-PSS: ...
user avatar
  • 136
2 votes

Why does AES-GCM means No MAC key, instead of MAC key what they are going to use?

TLS records need to be protected both for confidentiality (defence against an attacker learning their content) and for authenticity (defence against an attacker modifying them in transit). So they are ...
user avatar
6 votes

I didn't understand why both an implicit and an explicit nonce is used in AES-GCM in TLS 1.2

Question: I am not understanding that, what is main purpose of using these implicit nonce and explicit nonce and why it is only sending explicit part only? With the nonce, one important goal we need ...
user avatar
  • 132k
2 votes

Is HMAC part of the TLS/SSL process?

Yesno. HMAC is used to create the authentication tag in the cipher suites for TLS 1.2 and older that contain a non-authenticated cipher such as ciphers in CBC mode or RC4. For the other cipher suites ...
user avatar
2 votes

Is HMAC part of the TLS/SSL process?

Modern versions of TLS (TLS 1.2 with modern cipher suites, TLS 1.3) do not use HMAC for the to protect the integrity or authenticity1 of each message. They use dedicated authenticated encryption (AEAD)...
user avatar
2 votes

TLS 1.2 client finish message

As stated in this 2015 question plus my answer which you apparently didn't read even while commenting on the other answer, TLS <=1.2 HMAC is calculated over: the record seqnum, type, version, and ...
user avatar

Top 50 recent answers are included