SSL Protocol - R.D.Sivakumar

1. R.D.SIVAKUMAR,M.Sc.,M.Phil.,M.Tech.,
Assistant Professor of Computer Science &
Assistant Professor and Head, Department of M.Com.(CA),
Ayya Nadar Janaki Ammal College,
Sivakasi – 626 124.
Mobile: 099440-42243
e-mail : sivamsccsit@gmail.com
website: www.rdsivakumar.blogspot.in
SSL PROTOCOL

2. SSL(secure socket Layer)
 Introduced by NETSCAPE Corporation
in 1994
 SSL is IETF Standard(Internet
Engineering Task Force)
 SSL Version 1,2,3

3. COMPARE EACH VERSIONS OF SSL
►SSL V1 -> NETSCAPE STANDARD.
Lynx/2.8
SSL V2 -> NS Navigator 1.x/2.x
MS IE 3.x, Mozilla 1.2
Lynx/2.8
SSL V3 -> NS Navigator 2.x/3.x/4.x
MS IE 3.x/4.x, Mozilla 1.2
Lynx/2.8

4. SSL
One Common use of SSL is to secure
web HTTP commmunication between
a brower and a web server.This case
does not preclude the use of non
secured HTTP.
The secure HTTP is mainly Plain
HTTP Over SSL(names HTTPS)
URL is https://192.10.10.173:443

5. SSL ADVANTAGE
• MAINLY USED FOR WEB SECURITY
(recently most of use ssl protocol)

6. OBJECTIVE
• TO Implementing the ssl protocol
standard
• In this SSL standard to be attached
the between the transport layer
and Application layer

7. Data Exchange using TCP/IP

8. SSL Layer
Application layer
Transport Layer
Internet Layer
Data Link Layer
Physical Layer

9. SSL

10. SSL
Hand shake
Protocol
SSL change
Cipher Spec
Protocol
SSL Alert
Protocol HTTP
SSL Record Protocol
TCP
IP

11. Privacy
WEB Security
Authentication Integrity Non-repudiation

12. SSL
HANDSHAKERECORD ALERT

13. T
i
m
e

14. Type Length Content

15. 1.Security capabilities
2.Server authentication
3.Client authentication
4.Finish
1.Security capabilities
1.Client Hello
2.Server Hello

16. 2.Server authentication
1.Certificate
2.Server Key Exchange
3.Certificate Request
4.Server Hello
3.Client authentication
1.Certificate
2.Client Key Exchange
3.Certificate Verify

17. 2.Finished
3.Change cipher specs
4.Finished
4.Finish
1.Change cipher specs

18. Pre-Master secret Client Random Server Randim
Message Digit Algorithm
Master Secret

19. Master secret Client Random Server Randim
Message Digit Algorithm
Symmetric Key

21.  C/S has optionally authenticated each
otherAnd have decided what algorithms
to use for secure information exchange.

23. Application data
Fragmentation
Compression
Addition of MAC
Encryption
Append Header

24. The C/S detects an error the detecting
party sends an Alert Message to the
other Party

25. Length Content
security Cause

26. Plain text
Encryption Decryption
Network
Plain text
Ciphertext Ciphertext
Shared Secret
Key
Plain text
Encryption Decryption
Network
Plain text
Ciphertext Ciphertext
Shared Secret
Key