Editing Transport Layer Security (section)

===Data integrity===
A [[message authentication code]] (MAC) is used for data integrity. [[HMAC]] is used for [[cipher block chaining|CBC]] mode of block ciphers. [[Authenticated encryption]] (AEAD) such as [[Galois/Counter Mode|GCM]] and [[CCM mode]] uses AEAD-integrated MAC and does not use [[HMAC]].{{Ref RFC|8446|rsection=8.4}} HMAC-based [[pseudorandom function family|PRF]], or [[HKDF]] is used for TLS handshake.

{{Anchor|integrity-table}}

{|class="wikitable"style=text-align:center
|+Data integrity
!scope=col|Algorithm
!scope=col|SSL 2.0
!scope=col|SSL 3.0
!scope=col|TLS 1.0
!scope=col|TLS 1.1
!scope=col|TLS 1.2
!scope=col|TLS 1.3
!scope=col|Status
|-
!scope=row|[[HMAC]]-[[MD5]]
|{{Yes}}||{{Yes}}||{{Yes}}||{{Yes}}||{{Yes}}||{{No}}||rowspan=4|Defined for TLS 1.2 in RFCs
|-
!scope=row|[[HMAC]]-[[SHA-1|SHA1]]
|{{No}}||{{Yes}}||{{Yes}}||{{Yes}}||{{Yes}}||{{No}}
|-
!scope=row|[[HMAC]]-[[SHA-2|SHA256/384]]
|{{No}}||{{No}}||{{No}}||{{No}}||{{Yes}}||{{No}}
|-
!scope=row|[[AEAD block cipher modes of operation|AEAD]]
|{{No}}||{{No}}||{{No}}||{{No}}||{{Yes}}||{{Yes}}
|-
!scope=row|[[GOST 28147-89|GOST 28147-89 IMIT]]<ref name=gostlink/>
|{{No}}||{{No}}||{{No}}||{{No}}||{{Yes}}||{{No}}||Defined for TLS 1.2 in {{IETF RFC|9189}}.
|-
!scope=row|[[Kuznyechik|GOST R 34.12-2015]] [[AEAD block cipher modes of operation|AEAD]]<ref name=gostlink/>
|{{No}}||{{No}}||{{No}}||{{No}}||{{No}}||{{Yes}}||Defined for TLS 1.3 in {{IETF RFC|9367}}.
|}