High level summary of the SSL handshake protocol

The client sends a request to server for a secure connection. Request includes: session ID, pseudorandom number for freshness, and a list of cipher suites supported.
The server responds with the session ID, it's own pseudorandom number for freshness, the selected cipher suite, a copy of its public key certificate and details of the certificate chain.
The client should check the certificate's validity. If good, then the client creates a key that will be encrypted using the server's public key. This key is called the premaster secret and will be used to derive the keys to secure the session. The client encrypts the premaster secret with the server's public key, and sends it to the server.
Both the clent and the server then use the premaster secret and the two freshness values and a key derivation function to derive symmetric encryption keys and a MAC key.
The client then creates a MAC of all of the messages that have been sent thus far and encrypts that using the derived symmetric key. This is sent to the server as a "finished" message.
The server then creates a MAC of all the messages sent thusfar and and encrypts the MAC and sends it to the client as a "finished" message.

	Criado por jjanesko quase 13 anos atrás

IYM002 Notas sobre Crypto U12, SSL protocol descriptions, criado por jjanesko em 05-05-2013.