01.07.2013 Views

Secure Socket Layer Transport Layer Security

Secure Socket Layer Transport Layer Security

Secure Socket Layer Transport Layer Security

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

SSL Handshake Protocol Phases<br />

Client Server<br />

Client hello<br />

server hello<br />

certificate<br />

Server_key_exchange<br />

Certificate_request<br />

Server_hello_done<br />

certificate<br />

Client_key_exchange<br />

Certificate_verify<br />

Change_cipher_spec<br />

finished<br />

Change_cipher_Spec<br />

finished<br />

client server<br />

client_hello<br />

server_hello<br />

certificate<br />

server_key_exchange<br />

certificate_request<br />

server_hello_done<br />

certificate<br />

client_key_exchange<br />

certificate_verify<br />

change_cipher_spec<br />

finished<br />

change_cipher_spec<br />

finished<br />

Phase 1 – Establish parameters<br />

Phase 2 – Server authentication<br />

(optional: server key-exchange)<br />

key exchange)<br />

Phase 3 – Client key-exchange<br />

key exchange<br />

(optional: client authentication)<br />

Phase 4 – Finish: validation and<br />

begin using exchanged keys<br />

SSL Handshake Protocol Phases<br />

Phase 1: 1:<br />

Negotiation of the session ID, key exchange<br />

algorithm, MAC algorithm, encryption algorithm, and<br />

exchange of initial random numbers<br />

Phase 2: Server may send its certificate and key<br />

exchange message, and it may request the client<br />

to send a certificate. Server signals end of hello<br />

phase.<br />

Phase 3: 3:<br />

Client sends certificate if requested and may<br />

send an explicit certificate verification message.<br />

Client always sends its key exchange message.<br />

Phase 4: 4:<br />

Change cipher spec and finish handshake

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!