Score:2

Does TLS use use two symmetric keys in the same way SSH does? One for client to server and one for server to client communication?

dz flag

As described in the SSH RFC an initial IV to server, initial IV to client, encryption key client to server, encryption key server to client, integrity key client to server, and an integrity key server to client are generated.

Does TLS use a similar system? If not, Why doesn't TLS use a system like this?

Marc Ilunga avatar
tr flag
Hi, Which TLS version are you referring to? Or what is the source of this claim. Based on this it seems key separation is done in version 1.2 https://datatracker.ietf.org/doc/html/rfc5246#section-6.3
dave_thompson_085 avatar
cn flag
Basically dupe https://crypto.stackexchange.com/questions/1139 (automatically found by SE as 'related' -- did you even look?) and https://crypto.stackexchange.com/questions/50799
Score:2
my flag

Why doesn't TLS use a system like this?

TLS does have separate client-to-server and server-to-client keys - it always has, and that has not changed in any published version of TLS or SSL.

What makes you think it doesn't?

fgrieu avatar
ng flag
[This comment](https://crypto.stackexchange.com/posts/comments/214054).
nilch avatar
dz flag
Yes it was that comment. Change the title so it hopefully doesn't confuse others.
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.