Re: about the sequence number field

2004-01-03 Thread Mohamad Badra
What about the 32 octets in the finished message(CipherText)? How can we have it? Thank you Jostein Tveit wrote: Mohamad Badra <[EMAIL PROTECTED]> writes: I have 2 questions about this sequence number in TLS: 1)What is the value of finished's sequence number? It is zero?

Re: about the sequence number field

2004-01-02 Thread Jostein Tveit
Mohamad Badra <[EMAIL PROTECTED]> writes: > I have 2 questions about this sequence number in TLS: > > 1)What is the value of finished's sequence number? It is zero? >From RFC2246 page 16: sequence number Each connection state contains a sequence number, which is maintained separa

Re: about the sequence number field

2003-12-19 Thread Mohamad Badra
Dear, I have 2 questions about this sequence number in TLS: 1)What is the value of finished's sequence number? It is zero? 2) Is there any command line with OpenSSLto have the MAC? Thank you, -Bdr Swaminathan P wrote: Those were great replies. Thanks Lev and Geoff. Guess I'll have to put

Re: about the sequence number field

2003-11-19 Thread Swaminathan P
Those were great replies. Thanks Lev and Geoff. Guess I'll have to put more thought into this. Thanks again, swami On Wed, 19 Nov 2003, Geoff Thorpe wrote: > On November 19, 2003 07:16 pm, Swaminathan P wrote: > > I have a question anout the use of sequence number as a part of the > > input to th

Re: about the sequence number field

2003-11-19 Thread Geoff Thorpe
On November 19, 2003 07:16 pm, Swaminathan P wrote: > I have a question anout the use of sequence number as a part of the > input to the hash function during the MAC calculation. Does that > security concerns? Would the security aspects of theSSL be affected if > the sequence number is not used as

Re: about the sequence number field

2003-11-19 Thread Lev Walkin
Swaminathan P wrote: hi, thanks for your quick reply. So if I can include the sequence number as a part of the protocol(may be another field added by the SSL) data, I still solve the problem of replay attacks and I can get rid of sequence number from the MAC calculation. So my MAC wouldnt depend on

Re: about the sequence number field

2003-11-19 Thread Swaminathan P
hi, thanks for your quick reply. So if I can include the sequence number as a part of the protocol(may be another field added by the SSL) data, I still solve the problem of replay attacks and I can get rid of sequence number from the MAC calculation. So my MAC wouldnt depend on the sequence number

Re: about the sequence number field

2003-11-19 Thread Lev Walkin
Swaminathan P wrote: I have a question anout the use of sequence number as a part of the input to the hash function during the MAC calculation. Does that security concerns? Would the security aspects of theSSL be affected if the sequence number is not used as a part of the input to the hash funtio