Encrypt-then-MAC for Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS), September 2014
- Canonical URL:
- File formats:
- PROPOSED STANDARD
- P. Gutmann
- tls (sec)
Discuss this RFC: Send questions or comments to firstname.lastname@example.org
This document describes a means of negotiating the use of the encrypt-then-MAC security mechanism in place of the existing MAC-then-encrypt mechanism in Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS). The MAC-then-encrypt mechanism has been the subject of a number of security vulnerabilities over a period of many years.
For the definition of Status, see RFC 2026.
For the definition of Stream, see RFC 4844.