Subject: Re: [TLS] TLS1.3

From: "Lewis, Nick" <[email-masked]>
Date: Fri, 8 Feb 2013 11:48:42 +0000

>So here's the first cut, if there's anything that needs clarifying/changing let me know before I upload it.
>Peter.

While I believe that the responsibility for the mechanism that combines mac, crypt and pad should move from TLS to the cipher suites in the longer term, this extension seems to give most of the benefits without needing to port any cipher suites to AEAD

The document could be a little clearer if it used the same terminology as used in [TLS] such as "+" for concatenation and if it was more explict about the MAC e.g.

MAC(MAC_write_key, seq_num +
   TLSCompressed.type +
   TLSCompressed.version +
   TLSCompressed.length +
   ENC(TLSCompressed.fragment + padding + padding_length));

   where "+" denotes concatenation.

-- Nick

The details of this company are as follows:
G4S Technology Limited, Registered Office: Challenge House, International Drive, Tewkesbury, Gloucestershire GL20 8UQ, Registered in England No. 2382338.

This communication may contain information which is confidential, personal and/or privileged.

It is for the exclusive use of the intended recipient(s).
If you are not the intended recipient(s), please note that any distribution, forwarding, copying or use of this communication or the information in it is strictly prohibited.

Any personal views expressed in this e-mail are those of the individual sender and the company does not endorse or accept responsibility for them.

Prior to taking any action based upon this e-mail message, you should seek appropriate confirmation of its authenticity.

This e-mail has been scanned for all viruses by MessageLabs.