[Ach] TLS IETF WG and E-T-M

Aaron Zauner azet at azet.org
Tue Dec 3 18:17:19 CET 2013


BTW:
I advise to read the whole thread - it is increcible. But a good explaination is in this e-mail: http://www.ietf.org/mail-archive/web/tls/current/msg10753.html (kenny paterson is one of the guys with the RC4 and lucky13 attack regarding TLS you may remember).

Gutmann is well known in the crypto community and working for Google (AFAIK - At least he used to). 

Aaron


On 03 Dec 2013, at 17:59, Aaron Zauner <azet at azet.org> wrote:

> Since I recently had a short discussion during the previous meeting on wheter to choose mac-then-encrypt and encrypt-then-mac (I deployed the latter in the openssh  UMAC configuration). This might be of interest to you: http://www.ietf.org/mail-archive/web/tls/current/msg10722.html
> 
> A bit of background: 
> http://www.daemonology.net/blog/2009-06-24-encrypt-then-mac.html
> http://tools.ietf.org/html/draft-gutmann-tls-encrypt-then-mac-00
> 
> 
> Aaron
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 1091 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.cert.at/pipermail/ach/attachments/20131203/4e5ab623/attachment.sig>


More information about the Ach mailing list