1. Secure Sockets Layer (SSL) Presented by: Piyush Saggi Baylor University Dec 6, 2002

2. Plan of Action Need for SSL Brief Overview SSL protocols Questions

3. Need for SSL Internet powered world Insecurity of network communication One world – One protocol Applications unaware of security

4. What is SSL ? Secure Sockets Layer Network security protocol Goals: –1.Cryptographic security –2.Interoperability –3.Extensibility –4.Relative Efficiency

5. Basic Operation Application Data Fragmentation Compression Encryption Record Layer <2 14 bytes SSL Plaintext SSLCompressed SSLCiphertext TCP

6. Protocols SSL – layered protocol SSL Record protocol over TCP Encapsulates SSL Handshake protocol

7. Handshake Protocol A->B hello B->A Hi, I'm Bob, bobs-certificate A->B prove it B->A Alice, This Is bob { digest[Alice, This Is Bob] } bobs-private-key ok bob, here is a secret {secret} bobs-public-key {some message,MAC}secret-key 40 bit or 128 bit encryption

8. Nitty Grtties Certification Authorities – Verisign etc. https port number – 443 QUESTIONS ??