u6.2 TLS Components

u6.2 TLS Components

1. 5 components that implement the services.

2. Record Protocol

   • Fragments data into TLS
   • records and applies the encryption and integrity protection specified in handshake layer
   • provides services MAC and confidentiality
     • Used SHA-1 or MD5
     • Encrypted with DES, 3 DES or RC4

3. Handshake protocol

   • responsible for negotiating the use of new encryption algorithms, authentication mechanism and keys
   • Cipher Suite negotiation MAC / Cipher to be used
     • MAC - SHA / MD5
     • Crypto - DES, 3 DES or RC4

4. Alert protocol

   • raises alerts about protocol errors and notifies when a session ends.

5. Change Cipher Spec Protocol

   • is a single message used to update the cipher suite used on a connection.

6. Application Data protocol

   • shared record sub-layer supports the sending of the application data payload, the handshake, alert and Change Cipher Spec. messages.

7. Note

   • Either side can initiate re-negotiation
     • Re-negotiation allows a reduction in the amount of encryption computation that needs to be done because further encryption keys can be generated from the original pre-shared secret
     • keys can be replaced mid-session to increase security.
     • The protocol allows encryption gating so that re-keying to a higher encryption strength can take place if a browser indicates that a higher encryption strength is permitted.

Bilder und Dateien der Mindmap