security - Can a man-in-the-middle intercept an SSL packet and duplicate it? -
afaik, ssl encrypt message under secure. still have concern whether or not man in middle can catch packet , duplicate e.g. 1000 times
application data broken small segments (implementation dependent size, <=16kb). segment is
- compressed
- given sequence number
- added mac (sequence number included in mac calculation)
- encrypted
- given ssl record header contains sequence number
note role of sequence number in process. if man-in-the-middle duplicates 1 such segment, received can detect using sequence number. , attacker cannot forge sequence number since included in mac record header.
sequence number gives ssl protection against duplication, deletion, reordering , replay attacks.
Comments
Post a Comment