Encryption + Authentication
Encrypt-Then-MAC
MAC is computed from cryptogram.
Should use two different keys.
IPSec uses it.

Encrypt-And-MAC
MAC is computed from plaintext.
MAC is not encrypted.
SSH uses it.

MAC-Then-Encrypt
MAC is computed from plaintext.
MAC is encrypted.
TLS uses it

Last updated