IETF RFC 7366
Encrypt-then-MAC for Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
active, Most Current
Buy Now
| Organization: | IETF |
| Publication Date: | 1 September 2014 |
| Status: | active |
| Page Count: | 7 |
scope:
This document describes a means of negotiating the use of the encrypt-then-MAC security mechanism in place of the existing MACthen- encrypt mechanism in Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS). The MAC-then-encrypt mechanism has been the subject of a number of security vulnerabilities over a period of many years.
Document History
IETF RFC 7366
September 1, 2014
Encrypt-then-MAC for Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
This document describes a means of negotiating the use of the encrypt-then-MAC security mechanism in place of the existing MACthen- encrypt mechanism in Transport Layer Security (TLS) and Datagram...