3 ms·

I'm wondering how the integrity part of HTTPS works. It seems it's an authenticated encryption mode that does it, for example AES-GCM or a MAC as in ChaCha20 +

I'm wondering how the integrity part of HTTPS works. It seems it's an authenticated encryption mode that does it, for example AES-GCM or a MAC as in ChaCha20 + Poly1305

Ayesh 6y ago
Yes.
tptacek 6y ago
Yes, but note TLS records were explicitly authenticated with HMAC before the adoption of AEAD modes.