SSL Record Protocol Ops

• Message authentication code (MAC) – two pads are concatenated in SSLv3 but XORed in HMAC

• SSLv3 was based on original internet draft for HMAC, which used concatenation

• hash(secret_key || 0x5C_pad || hash(secret_key || 0x36_pad || seq_num || compress_type || length || fragment))