API Build-data JSON Resources
Theme

Choose how MSRBot.io looks on this device.

Auto (match system) Light mode Dark mode

Preference is stored in this browser only.

IETF RFC 7366
[ACTIVE]

Encrypt-then-MAC for Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)

Metadata

Publisher
IETF
Doc Type
Standard
Pages
7
Abstract
This document describes a means of negotiating the use of the encrypt-then-MAC security mechanism in place of the existing MAC-then-encrypt mechanism in Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS). The MAC-then-encrypt mechanism has been the subject of a number of security vulnerabilities over a period of many years.
Publication Date
2014-09-01
Status Note
Proposed Standard
DOI
10.17487/RFC7366
Link
https://doi.org/10.17487/RFC7366
Author(s)
Peter Gutmann
Latest version of IETF RFC 7366

Document Versions — IETF RFC 7366

  • ▶ IETF RFC 7366 (2014-09-01)
    THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

Bibliographic Reference(s)

  • Krawczyk, H., "The Order of Encryption and Authentication for Protecting Communications (or: How Secure Is SSL?)", Proceedings of Crypto '01, Springer-Verlag LNCS No. 2139, p. 310, August 2001. EXTERNAL
  • Moeller, B. and A. Langley, "TLS Fallback Signaling Cipher Suite Value (SCSV) for Preventing Protocol Downgrade Attacks", Work in Progress, July 2014. EXTERNAL
  • Bellare, M. and C. Namprempre, "Authenticated Encryption: Relations among notions and analysis of the generic composition paradigm", Proceedings of AsiaCrypt '00, Springer-Verlag LNCS No. 1976, p. 531, December 2000. EXTERNAL
Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC7366.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree
Reference this Doc

Plain text (ISO 690 compliant)

Preview:
IETF RFC 7366, Encrypt-then-MAC for Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS). Available at https://doi.org/10.17487/RFC7366
Snippet:
IETF RFC 7366, Encrypt-then-MAC for Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS). Available at https://doi.org/10.17487/RFC7366

HTML (ISO 690 compliant)

Preview:
IETF RFC 7366, Encrypt-then-MAC for Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS). Available at https://doi.org/10.17487/RFC7366
Snippet:
<span class="citation"><cite>IETF RFC 7366</cite>, Encrypt-then-MAC for Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS). Available at <a href="https://doi.org/10.17487/RFC7366" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7366</a></span>

SMPTE Icon SMPTE's HTML Pub

Preview:
IETF RFC 7366, Encrypt-then-MAC for Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
doi: 10.17487/RFC7366
url: https://doi.org/10.17487/RFC7366
Snippet:
<li>
<cite id="bib-rfc7366">IETF RFC 7366</cite>, Encrypt-then-MAC for Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
<span class="doi">10.17487/RFC7366</span>
</li>

Referenced By