Referring the slide 16 from this link:
I want to ask why is MAC encrypted along with the data to be transmitted. Why isn't MAC just appended at the end of encrypted data ?
Asked
Active
Viewed 35 times
0
-
2Does this answer your question? Why does TLS do Authenticate-then-Encrypt instead of Encrypt-then-Authenticate? – Steffen Ullrich Aug 04 '20 at 03:56
-
If you mean encrypt-and-MAC (MAC over plaintext) then have a look here: https://crypto.stackexchange.com/a/205/1172. You might leak information about the plaintext if the sequence number is not unique or present. Feel free to clarify & update your question if you think your question has not been answered. – Maarten Bodewes Aug 04 '20 at 12:14