SSL

Question 1

SSL features

Answer 1

• Endpoint authentication
• Secure transport session
  
  • Encrypted
  • Authenticated
• Transport layer security
• Widely deployed:
  
  • POPS, SECURE IMAP, SECURE SMTP, HTTPS, SFTP
  • Usually different port

Question 3

SSL Handshake and Parameter Negotiation

Answer 3

Parameter Negotiation:

• Client offers:
  
  • List of cyphers
  • parameters
• Server
  
  • Picks cyphers
  • Might request client cert

Question 4

SSL Security Features

Answer 4

• Only hello and server cert are in clear
• a pair of sessions keys per direction:
  
  • encryption
  • authentication
• Periodically changed

Question 5

SSL Record Protocol

Answer 5

• Header
  
  • Authentication (MAC)
• Max 32KB
• Same data protection as IPsec
• No IP header protection