RFC 7366

Encrypt-then-MAC for Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS), September 2014

Canonical URL:
https://www.rfc-editor.org/rfc/rfc7366.txt
File formats:
Plain TextPDF
Status:
PROPOSED STANDARD
Author:
P. Gutmann
Stream:
IETF
Source:
tls (sec)

Cite this RFC: TXT  |  XML

DOI:  10.17487/RFC7366

Discuss this RFC: Send questions or comments to tls@ietf.org

Other actions: Find Errata (if any)  |  Submit Errata  |  Find IPR Disclosures from the IETF


Abstract

This document describes a means of negotiating the use of the encrypt-then-MAC security mechanism in place of the existing MAC-then-encrypt mechanism in Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS). The MAC-then-encrypt mechanism has been the subject of a number of security vulnerabilities over a period of many years.


For the definition of Status, see RFC 2026.

For the definition of Stream, see RFC 4844.


Download PDF Reader



Search RFCs
Advanced Search
×