Levels of Session Protection

• Initial Authentication only

• Safe messages:

• Authentication of every message
• Keyed hashing with session key

• Private messages:

• + Encryption of every message
• With session key, or mutually negotiated subsession keys

• Note: Application can choose other methods