First time here? Check out the FAQ!

THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.

Ask Your Question

0

there say `Change Cipher Spec`? why it do not use `Choose Cipher Suite`?

I have a question about Server Hello of TLS handshake.

you see the red frame I tagged.

why there say Change Cipher Spec? why it do not use Choose Cipher Suite?

asked 2022-06-20 08:52:08 +0000

updated 2022-06-20 09:20:58 +0000

edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

Sort by

0

TLS 1.3 (see RFC 8446) permits a 0-RTT connection where the server simply chooses the cipher spec from the reduced list offered by the client and starts the encrypted data transfer early.

For TLS middle box compatibility, the server also sends a Change Cipher Spec message in a TLS 1.2 record, see RFC 8446 Appendix D4:

-  The server sends a dummy change_cipher_spec record immediately after its first handshake message.  This may either be after a ServerHello or a HelloRetryRequest.

answered 2022-06-20 09:34:52 +0000

edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.