Adayadil Thomas wrote:
Greetings.
I have an SSL session in which the client and server has negotiated for
cipherSuite SSL_RSA_WITH_RC4_128_MD5
compressionMethod zlib-compression
Now, is the zlib-compression applied before encryption or after ?
data -> zlib-compression -> encryption ======> decrypt ->
zlib->inflate-> data
or
data -> encryption -> zlib-compression ======> zlib->inflate-> decrypt
-> data
Thanks
Ashley Thomas
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@openssl.org
Automated List Manager [EMAIL PROTECTED]
Ashly look at RFC 2246 , The TLS Record Protocol part
certainly u see this :
" optionally compresses the data, applies a MAC, encrypts, and
transmits the result "
compression is an optional layer (i think no compression used in
well-known ssl implementation)
and ur question answer : zlib-compression -> encryption
regards
______________________
Shahin Khorasani
PKI Dept.
Sharif SecureWare Co.
www.parssign.com
______________________
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@openssl.org
Automated List Manager [EMAIL PROTECTED]
