Collaborate Disseminate
I am learning TLS handshake and find client/serve will negotiate a cihpersuite during client/server hello.
Usually, the last part of a ciphersuite is a hash algorithm, like SHA256 in ECDHE-ECDSA-AES128-SHA256. The second part of a ciphersu… Continue reading What is the relation between "signature_algorithms" handshake extension and TLS ciphersuite
I am learning TLS Session Resumption.
What I got is session resumption can reduce 1 RTT for TLS 1.2 by reusing MasterSecret. Both the client and server needn’t to run key exchange algorithm.
My questions are:
Whether session resumption re… Continue reading Whether TLS session resumption reuse the symmetric keys?
I have a private file encryption project that I’m working on that currently uses Encrypt-then-MAC. However, I’ve been looking at age and the article that’s referenced in the spec that discusses encrypting streams with AEADs. It’s not possi… Continue reading How to implement ChaCha20Poly1305 with large files? (Streamed/Chunked AEADs)
Whats the difference between a XMAS Tree scan and an Inverse TCP scan using the FIN, URG, and PSH flags? Are they the same thing?
XMAS Tree scans are designed to manipulate the PSH, URG and FIN flags of the TCP header. The I… Continue reading XMAS Scan vs Inverse TCP