Change Cipher Spec Protocol

• The change cipher spec message is sent by both the client and server to notify the receiving party that subsequent records will be protected under the just-negotiated CipherSpec and keys.
  • It exists to update the cipher suite to be used in the connection.
  • It permits a change in the SSL session occur without having to renegotiate the connection.
  • The message consists of a single byte of value 1.

• There are two states for the change cipher spec message.
  • Read Current
  • Read Pending

• The change cipher spec message is normally sent at the end of the SSL handshake.

What is a cipher suite?

---

---

© 2006 John Michael Pierobon

Notes