Inside an encrypted record
03An authenticated-encryption operation protects content, its real type, and optional padding.
Terms in this drawing
This guide explains the 2018 publication. Superseded by RFC 9846.
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 5.2 ↗
RFC 8446 · § 5.2EXAMPLE
4 / 4
04
Verify before releasing plaintext.
A modified record fails authentication; do not deliver unverified bytes.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
The outer record is visible; its protected content is not.
- TLSInnerPlaintext contains content, an inner content type, and optional zero padding.
- The TLSCiphertext header is associated data for AEAD.
- Failed record authentication terminates the connection with a bad_record_mac alert.
The examples simplify the wire representation. Follow the linked specification and application profile for implementation.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy