Branch: Tag:

2014-06-29

2014-06-29 14:58:49 by Henrik Grubbström (Grubba) <grubba@grubba.org>

SSL: Support EXTENSION_encrypt_then_mac.

This draft extension improves security for old CBC suites by
hashing the encrypted data including the padding. This works
around the various TLS padding attacks.

781:   #endif    });    + //! Attempt to enable encrypt-then-mac mode. + int encrypt_then_mac = 1; +    //! Non-zero to enable caching of sessions   int use_cache = 1;