Transport Layer Security-TLS传输安全加密.pdf

TransportLayerSecurity

Chester Rebeiro

IIT Madras

Some of the slides borrowed from the book ‘Computer Security: A Hands on Approach’ by

Wenliang Du

TLS:Protocoltoachievesecure

communication

TLS provides secure communication channel with 3 properties:

• Confidentiality

• Integrity

• Authentication

Two important components

• TLS Handshake

• Secure Data transmission

2

SSLvsTLS

• 1995: Netscape released SSL 2.0

• 1996: New version SSL 3.0

• 1999: TLS introduced as the new version of SSL

• 2011: SSL 2.0 deprecated by IETF

• 2015: SSL 3.0 deprecated by IETF

** Difference: Handshake protocols changes from SSL to TLS.

Encryption

3

TLSintheNetworkStack

• Between the network and Application

layer.

• Unprotected data is given to TLS by Application

layer

• TLS handles encryption, decryption and integrity

checks

• TLS gives protected data to Transport layer

4

TLSHandshake

• Before a client and server can communicate securely, several things

need to be set up first:

• Encryption algorithm and key

• MAC algorithm

• Algorithm for key exchange

• These cryptographic parameters need to be agreed upon by the client

and server

TLSHandshake

6

NetworkTrafficsDuringTLSHandshake

Since TLS runs top of TCP, a TCP connection needs to be established

befor