Secure Sockets Layer (SSL) Presented by: Piyush Saggi Baylor University Dec 6, 2002
Plan of Action Need for SSL Brief Overview SSL protocols Questions
Need for SSL Internet powered world Insecurity of network communication One world – One protocol Applications unaware of security
What is SSL ? Secure Sockets Layer Network security protocol Goals: –1.Cryptographic security –2.Interoperability –3.Extensibility –4.Relative Efficiency
Basic Operation Application Data Fragmentation Compression Encryption Record Layer <2 14 bytes SSL Plaintext SSLCompressed SSLCiphertext TCP
Protocols SSL – layered protocol SSL Record protocol over TCP Encapsulates SSL Handshake protocol
Handshake Protocol A->B hello B->A Hi, I'm Bob, bobs-certificate A->B prove it B->A Alice, This Is bob { digest[Alice, This Is Bob] } bobs-private-key ok bob, here is a secret {secret} bobs-public-key {some message,MAC}secret-key 40 bit or 128 bit encryption
Nitty Grtties Certification Authorities – Verisign etc. https port number – 443 QUESTIONS ??