Subject: [TLS] Re: TLS application data MAC query

From: Jostein Tveit <[email-masked]>
Date: Thu, 16 Sep 2004 16:59:50 +0200

Avinash Agarwal <[email-masked]> writes:

> The rfc (2246) says at § F.2 "protecting application data" 
> "Outgoing data is protected with a MAC before transmission. To prevent 
>    message replay or modification attacks, the MAC is computed from the 
>    MAC secret, the sequence number, the message length, the message 
>    contents, and two fixed character strings." 
>
> What are the "two fixed character strings"? 

That is probably a cut and paste error from the SSL3
standard. SSL3 had a slightly different MAC computation, using
two fixed padding strings. See 5.2.3.1 in the SSL3 spec.

-- 
Jostein Tveit ([email-masked])

_______________________________________________
TLS mailing list
[email-masked]
https://www1.ietf.org/mailman/listinfo/tls