Hi, I found there are two ways to encrypt/decrypt RECORD data after a SSL connection is set up in OpenSSL. 1.In the ssl3_enc() function, it calls EVP_Cipher() to encrypt/decrypt the record data; 2.In the do_ssl3_write() function, it calls do_compress() to compress the record data, then do_compress() itself calls the funciton COMP_compress_block() to do compression actually. So my question is what's difference between these two ways? Which one is the real crypto-function in use when data is transmited between client and server using SSL? Thanks in advance. Shawroo Jin. July 23,1999 --== Sent via Deja.com http://www.deja.com/ ==-- Share what you know. Learn what you don't. ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]