Slides by Kent Seamons and Tim van der Horst Last Updated: Nov 8, 2013.

Slides:

Advertisements

Similar presentations

Crash course on SSL/TLS Ran Canetti December 2009 ( Based on slided by Jörg Schwenk)

Advertisements

1 Lecture 17: SSL/TLS history, architecture basic handshake session initiation/resumption key computation negotiating cipher suites application: SET.

CS470, A.SelcukSSL/TLS & SET1 CS 470 Introduction to Applied Cryptography Instructor: Ali Aydin Selcuk.

TLS Introduction 14.2 TLS Record Protocol 14.3 TLS Handshake Protocol 14.4 Summary.

SMUCSE 5349/49 SSL/TLS. SMUCSE 5349/7349 Layers of Security.

Cryptography and Network Security

Presented by Fengmei Zou Date: Feb. 10, 2000 The Secure Sockets Layer (SSL) Protocol.

SSL CS772 Fall Secure Socket layer Design Goals: SSLv2) SSL should work well with the main web protocols such as HTTP. Confidentiality is the top.

17.1 Copyright © The McGraw-Hill Companies, Inc. Permission required for reproduction or display. Chapter 17 Security at the Transport Layer: SSL and TLS.

Socket Layer Security. In this Presentation: need for web security SSL/TLS transport layer security protocols HTTPS secure shell (SSH)

VOYAGER: Yet Another Secure Web Browser to Demonstrate Secure Socket Layer Working and Implementation By : Shrinivas G. Deshpande Advisor: Dr. Chung E.

Web Security (SSL / TLS)

7-1 Chapter 7 – Web Security Use your mentality Wake up to reality —From the song, "I've Got You under My Skin“ by Cole Porter.

An Introduction to Secure Sockets Layer (SSL). Overview Types of encryption SSL History Design Goals Protocol Problems Competing Technologies.

Transport Layer Security (TLS) Protocol Introduction to networks and communications(CS555) Prof : Dr Kurt maly Student:Abhinav y.

SSL AND E- COMMERCE S ECURITY gz2155 Guangwei Zhang.

By: Hassan Waqar.  A PROTOCOL for securely transmitting data via the internet.  NETWORK LAYER application.  Developed by NETSCAPE.

CMSC 414 Computer (and Network) Security Lecture 26 Jonathan Katz.

Apr 2, 2002Mårten Trolin1 Previous lecture On the assignment Certificates and key management –Obtaining a certificate –Verifying a certificate –Certificate.

Cryptography and Network Security Chapter 17

Intro to SSL/TLS Network Security Gene Itkis. 6/14/2015 Gene Itkis: CS558 Network Security 2 Origins Internet Engineering Task Force (IETF) –

Intro to SSL/TLS Network Security Gene Itkis. 6/23/2015 cs Network Security (Gene Itkis) 2 Origins Internet Engineering Task Force (IETF) –

CSCE 790: Computer Network Security Chin-Tser Huang University of South Carolina.

Chapter 8 Web Security.

Announcement Final exam: Wed, June 9, 9:30-11:18 Scope: materials after RSA (but you need to know RSA) Open books, open notes. Calculators allowed. 1.

11 Secure Sockets Layer (SSL) Protocol (SSL) Protocol Saturday, University of Palestine Applied and Urban Engineering College Information Security.

SSL / TLS in ITDS Arun Vishwanathan 23 rd Dec 2003.

Behzad Akbari Spring 2012 (These slides are based on lecture slides by Lawrie Brown)

Introduction to Secure Sockets Layer (SSL) Protocol Based on:

CSCE 715: Network Systems Security Chin-Tser Huang University of South Carolina.

Cryptography and Network Security (CS435) Part Fourteen (Web Security)

Web Security : Secure Socket Layer Secure Electronic Transaction.

Cryptography and Network Security (SSL)

December 2008Prof. Reuven Aviv, SSL1 Web Security with SSL Network Security Prof. Reuven Aviv King Mongkut’s University of Technology Faculty of information.

Tunneling and Securing TCP Services Nathan Green.

SSL (TLS) Part 2 Generating the Premaster and Master Secrets + Encryption.

1 Understanding Secure Socket Layer (SSL) Advisor Advisor Prof. Tzonelih Hwang Presenter Prosanta Gope.

SMUCSE 5349/7349 SSL/TLS. SMUCSE 5349/7349 Layers of Security.

Secure Sockets Layer (SSL) Protocol by Steven Giovenco.

1 SSL/TLS. 2 Web security Security requirements Secrecy to prevent eavesdroppers to learn sensitive information Entity authentication Message authentication.

1 Chapter 7 WEB Security. 2 Outline Web Security Considerations Secure Socket Layer (SSL) and Transport Layer Security (TLS) Secure Electronic Transaction.

CSCE 715: Network Systems Security Chin-Tser Huang University of South Carolina.

CMSC 414 Computer and Network Security Lecture 27 Jonathan Katz.

@Yuan Xue CS 285 Network Security Secure Socket Layer Yuan Xue Fall 2013.

Encryption and Security Tools for IA Management Nick Hornick COSC 481 Spring 2007.

Cryptography CSS 329 Lecture 13:SSL.

Henric Johnson1 Chapter 7 WEB Security Henric Johnson Blekinge Institute of Technology, Sweden

The Secure Sockets Layer (SSL) Protocol

Cryptography and Network Security

CSCE 715: Network Systems Security

Visit for more Learning Resources

CSE 4095 Transport Layer Security TLS, Part II

Cryptography and Network Security

Cryptography and Network Security Chapter 16

CS 465 TLS Last Updated: Oct 31, 2017.

SSL (Secure Socket Layer)

The Secure Sockets Layer (SSL) Protocol

Transport Layer Security (TLS)

Cryptography and Network Security

Presentation transcript:

Slides by Kent Seamons and Tim van der Horst Last Updated: Nov 8, 2013

 Understand the TLS handshake  Understand client/server authentication in TLS › RSA key exchange › Explain certificate ownership proofs in detail › What cryptographic primitives are used and why?  Understand session resumption  Understand the limitations of TLS

SSLv1 (1994) Netscape unreleased SSLv2 (1994) Netscape First release STLP (1996) Microsoft PCT (1995) Microsoft SSLv3 (1995) Netscape TLS 1.0 ( ) IETF (aka SSLv3.1) WTLS (1998) WAP Forum Source: SSL and TLS, Rescorla TLS 1.1 (2006) TLS 1.2 (2008)

SSL Record Protocol Operation Source: Network Security Essentials (Stallings)

SSL Record Format Source: Network Security Essentials (Stallings)

 In vanilla RSA, the premaster secret is encrypted with the server’s public key › If the server’s private key is compromised all past and future sessions are also compromised › Majority of TLS uses vanilla RSA  Alternatives › Ephemeral RSA › Authenticated Ephemeral Diffie-Hellman

 How many shared keys are derived between a client and a server that establish a TLS session? › Each side generates 4-6 keys  How does the server prove ownership of its private key? › Implicitly by decrypting the pre-master secret and finishing handshake  How does the client prove ownership of its private key when client authentication is (rarely) used? › Send digital signature to the server  What is the pre-master secret? › Who creates it? › How is it securely transmitted?  What is session resumption? › How does it differ from a regular SSL handshake?  When do the client and server start encrypting traffic using symmetric encryption? › Finished message