Sip PPT - (Topic SSL) .

Summer Internship Program
“Internet of Things”
Submitted To : Submitted By :
Prof. Pooja Agrawal Aayush Jain (0901IT191002)
Prof. Sneha Garg Akshat Singh (0901IT191008)
DEPT. Of CSE & IT Shelly Bansal (0901ET191061)
Secure Socket Layer
 Content
Web Security
Introduction to SSL/TLS
Secure Socket Layer (SSL)
• Where, What and How about SSL

• Architecture
• The Four Protocols
• SSL Certificate
 Web security Web is now widely
used by businesses,
government firms and
individuals.
Internet & Web space Integrity : Someone

are vulnerable. might alter content
These variety of Confidentiality :

threats need added Anyone can see
security mechanisms content
Authentication : Not
clear who you are
talking with
 Introduction
Secure Sockets Layer (SSL) Transport Layer Security (TLS)

• Developed by Netscape Corporation • Successor of SSL
• Versions 1, 2, and 3 (released in • IETF standards track protocol, based on
1996) SSL 3.0
•Transport Layer Security (TLS)
and its predecessor, Secure
Sockets Layer (SSL), are
cryptographic protocols that
provide security for
communications over
networks such as the Internet.
•TLS and SSL encrypt the

segments of network
connections at the Transport
Layer end-to-end.
 Where SSL fits
 What security
is Provided?
• Endpoint Authentication
By Providing • Unilateral or Bilateral Communication
Confidentiality
• Eavesdropping
For Preventing • Tampering
• Message Forgery
 How security is provided?
• Encryption
Eavesdropping
• Symmetric-key Cryptography
• Message Digest
Tampering
• Cryptographic Hash
• Authentication& Digital
Message Forgery signature
• Public-key Cryptography
 Uses public key
scheme
Each client-server pair uses
2 Public keys
• One for client (browser)

• Created when browser is installed
on client machine
• One for server (http server)
• Created when server is installed
on server hardware
2 Private keys
• One for client browser

• One for server (http server)
 SSL Architecture SSL session
An association between client & server
Created by the Handshake Protocol
Define a set of cryptographic parameters
May be shared by multiple SSL connections SSL

connection
A transient, peer-to-peer, communications link
Associated with 1 SSL session

 The Four Upper Layer Protocols
Handshaking Record protocol : Change cipher Alert protocol :

protocol : Encrypt/decrypt spec protocol: messages
Establish application data Alert to a change in Important to SSL
communication communication connections
variables variables
 SSL The most complex part of SSL.
Handshake
Protocol Allows server & client to : -
• Authenticate each other

• Negotiate encryption & MAC algorithms
• Negotiate cryptographic keys to be used
Comprises a series of messages in phases
• Establish Security Capabilities

• Server Authentication and Key Exchange
• Client Authentication and Key Exchange
• Finish
 SSL It Provides :
Record
Protocol Confidentiality
• Using symmetric encryption with a shared secret key

defined by Handshake Protocol
• Message is compressed before encryption
Message integrity
• Using a MAC (Message Authentication Code) created

shared secret key and a short message.
One of 3 SSL specific protocols which use the
 SSL Change SSL Record protocol
Cipher Spec
Protocol
A single message
Purpose of message
• Cause copy of pending state to current state

• Updates cipher suite to be used on the current connection
 SSL Alert Conveys SSL-related alerts to peer entity
Protocol Consists of two bytes

• 1st byte : Warning or fatal
• 2nd byte: Code for specific alerts
Specific alert types

• Unexpected message, bad record mac,
decompression failure, handshake failure, illegal
parameter
• close notify, no certificate, bad certificate,
unsupported certificate, certificate revoked,
certificate expired, certificate unknown
Compressed & encrypted like all SSL data

It is digital certificate that provides authentication for a
website
 What is an
SSL
certificate? It enables an encrypted connection.
It is commonly used on e-commerce sites and pages that

require users to submit personal or credit card information.
SSL encryption can help prevent hackers from stealing private

information by ensuring that all data passed between the two
parties remains private and secure
 How SSLCertificates Work
 Different types of SSL certificates
 Why do you need an SSL certificate?
An SSL certificate helps secure information such as:
Credit card Personally

Login credentials transactions or bank identifiable
account information information
Proprietary Legal documents

Medical records
information and contracts
Thank You

Sip PPT - (Topic SSL) .

Uploaded by

Copyright:

Available Formats

Sip PPT - (Topic SSL) .

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Sip PPT - (Topic SSL) .

Uploaded by

Copyright:

Available Formats

Summer Internship Program

Secure Socket Layer (SSL)

• Where, What and How about SSL

Internet & Web space Integrity : Someone

These variety of Confidentiality :

Secure Sockets Layer (SSL) Transport Layer Security (TLS)

•TLS and SSL encrypt the

Each client-server pair uses

• One for client (browser)

• One for client browser

An association between client & server

Created by the Handshake Protocol

Define a set of cryptographic parameters

May be shared by multiple SSL connections SSL

A transient, peer-to-peer, communications link

Associated with 1 SSL session

Handshaking Record protocol : Change cipher Alert protocol :

• Authenticate each other

Comprises a series of messages in phases

• Establish Security Capabilities

• Using symmetric encryption with a shared secret key

• Using a MAC (Message Authentication Code) created

• Cause copy of pending state to current state

Protocol Consists of two bytes

Specific alert types

Compressed & encrypted like all SSL data

It is commonly used on e-commerce sites and pages that

SSL encryption can help prevent hackers from stealing private

An SSL certificate helps secure information such as:

Credit card Personally

Proprietary Legal documents

You might also like