Lecture4TransportLayerSecurity详解.PDFVIP

Lecture 4: Lecture 4: Transport Layer Security Transport Layer Security (secure Socket Layer) (secure Socket Layer) Recommended reading: Thomas, SSS and TLS essentials (old but very well written) Giuseppe Bianchi SSL/TLS: layered view SSL/TLS: layered view HTTP SMTP …… https HTTP SMTP …… SSL / TLS TCP/UDP TCP/UDP IPsec IP Network layer security Transport layer security SSL/TLS: operates on top of TCP, but below application layer (can be considered as top sublayer for L4) SSL/TLS: it is NOT a security enhancement of TCP! Giuseppe Bianchi 1 History of SSL/TLS History of SSL/TLS SSL v1 SSL v2 SSL v3 TLS v1 by Netscape Integrated in Redesigned IETF SSL design never released netscape 1.1 from scratch (versus Netscape) Badly broken! by Netscape SSL v3.1 1994 1995 1996 1996-1999 Public Domain implementation available @ TLS 1.0 specification in RFC 224 More recent RFC specification: TLS 1.1, RFC 4346, April 2006 Even more recent: TLS 1.2, Internet Draft, March 2007 Basically SSL with minor modification Also referred to as SSL v3.1 However NOT backward compatible with SSL 3.0 Not necessarily limited to Internet transport! Devised for point-to-point relationships in general E.g. EAP-TLS (RFC 2716) TLS mechanisms employed for authentication and integrity protection over L2 EAP