A method of assessing latency of a ciphering end point of a secure communication channel , the method comprising: a. generating , by a traffic analyzer , a test traffic comprising a series of original data packets, wherein, for each original data packet, a size of a given packet is uniquely indicative of the packet's place in a sequence of data packets in the series and enables unique correspondence with a size of the given packet upon its encryption and wherein the size of the given data packet does not exceed a size of a maximal transmit unit, MTU, reduced by a size of authentication, encryption and encapsulation, AEE, overhead corresponding to a protocol applied when creating the secured communication channel ; b. by the traffic analyzer , successively transmitting the original packets in the generated series to the ciphering end point , whilst associating the transmitted original packets with respective departure time stamps; c. receiving , by the traffic analyzer , encrypted packets from the ciphering end point and associating the received encrypted packet with respective arrival time stamps; d. for each given received encrypted packet associated with its respective arrival time stamp TS a , identifying a matching original packet characterized by a size of the matching original packet corresponding to a size of the given received encrypted packet reduced by the size of AEE overhead; and its place in the sequence of original packets based on the size of the matching original packet and, thereby, its departure timestamp TS d , thus giving rise to a plurality of timestamps pairs (TS d ; TS a ), each timestamp pair indicative of delay in delivery for a respective pair of matching packets, the plurality of timestamp pairs usable for latency assessment. a. generating , by a traffic analyzer , a test traffic comprising a series of original data packets, wherein, for each original data packet, a size of a given packet is uniquely indicative of the packet's place in a sequence of data packets in the series and enables unique correspondence with a size of the given packet upon its encryption and wherein the size of the given data packet does not exceed a size of a maximal transmit unit, MTU, reduced by a size of authentication, encryption and encapsulation, AEE, overhead corresponding to a protocol applied when creating the secured communication channel ; b. by the traffic analyzer , successively transmitting the original packets in the generated series to the ciphering end point , whilst associating the transmitted original packets with respective departure time stamps; c. receiving , by the traffic analyzer , encrypted packets from the ciphering end point and associating the received encrypted packet with respective arrival time stamps; d. for each given received encrypted packet associated with its respective arrival time stamp TS a , identifying a matching original packet characterized by a size of the matching original packet corresponding to a size of the given received encrypted packet reduced by the size of AEE overhead; and its place in the sequence of original packets based on the size of the matching original packet and, thereby, its departure timestamp TS d , thus giving rise to a plurality of timestamps pairs (TS d ; TS a ), each timestamp pair indicative of delay in delivery for a respective pair of matching packets, the plurality of timestamp pairs usable for latency assessment. <EOS>