Re: [TLS] questions regarding draft-ietf-tls-rfc2246-bis-13.txt

Sami Lehtinen <sjl@ssh.com> writes:

> Hello,
>
> In section 6.2.3.2. CBC block cipher:
>
>     The encrypted data length (TLSCiphertext.length) is one more than the
>     sum of TLSCompressed.length, CipherSpec.hash_size, and
>     padding_length.
>
> Should this be:
>
>     The encrypted data length (TLSCiphertext.length) is one more than the
>     sum of CipherSpec.block_length, TLSCompressed.length,
>            ^^^^^^^^^^^^^^^^^^^^^^^^^
>     CipherSpec.hash_size, and padding_length.
>
> to accommondate for the explicit IV?

I've reviewed this and I believe this is incorrect. You can form the
explicit IV by encrypting a non-explicit IV, but it's not properly
part of the ciphertext.

Best,
-Ekr

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls