SSL/TLS Lecture Series - Episode 16
In this episode we will discuss about SSL record layer, which is the outer most layer in SSL/TLS.
the job of SSL record layer
record layer header: type, version, length
record layer data
breaking application data into multiple SSL records
breaking a single SSL record into multiple TCP segments
reassembling SSL records spanning multiple TCP segments
reassembling application data spanning multiple SSL records
single TCP segment containing multiple SSL records
client and server side sequence number
purpose of using sequence number
output of record layer may contain only plaintext
record layer data types:
Handshake Data (handled by Handshake Protocol)
ChangeCipherSpec Data (handled by ChangeCipherSpec Protocol)
Application Data (handled by Application Data Protocol)
Alert Data (handled by Alert Protocol)
TLS version negotiation using ClientHello and ServerHello
difference between non-AEAD and AEAD ciphers
how record layer do encryption, MAC for {stream/block/AEAD} ciphers.
concept of MAC-then-encryption
concept of producing ciphertext and authentication tag in one go (in AEAD ciphers)