FIT1047 Lecture Notes - Lecture 11: Digital Signature, Ipsec, Shared Secret
12 Jun 2018
School
Department
Course
Professor
!"#$%&'()*%+'+#+,-
!"# $!%&'()*%+,"&-.%,#./0%1+-2
314(,+*,.(+&561(7,&,(7&%.8,9.-,+*,)%*+./+,4.((&:.(
;*'<18.'+1&61+-=,1'+.:%1+->&0+7.'+1/1+-
§
○
35*?.,!,6&-.%=,5.6*@,A!!B#,C,4&16,C,*+7.%(
○
D%1:1'&66-,##",$#./0%.,#*/9.+,"&-.%2=,%.)6&/.8, 1',EFFF
○
;0%%.'+,?.%G,!"#,EHI,&(,JK!L,ML;,NIOP
○
Q1<<1.RA.664&',9.-,.S/7&':. 0(.8,+*,/%.&+.,(7&%.8,(./%.+
3,&'8,T,)0561/6-,&:%..,*',?&60.(,:,&'8,'
EH
3,:.'.%&+.(,%&'8*4,3,&'8,&U:34*8$'2
IH
T,:.'.%&+.(,%&'8*4,T,&'8,5U:T4*8$'2
KS/7&':.,&,&'8,5
VH
#7&%.8,9.-,1(,W,U,53U,:T3 U,:3T U,&T4*8$'2
OH
X*%9(,5./&0(.,3,&'8,T,&%.,(./%.+,@716.,&,&'8,5,&%.,)0561/=,7&%8,
+*,/*4)0+.,+71(,81(/%.+.,6*:&%1+74
§
○
B7&(.(>(05R)%*+*/*6(
A&'8(7&9.
Y.:*+1&+.,)&%&4(
Z
;&',&0+7.'+1/&+. (.%?.%,C,/61.'+=,@716.,1',A!!B#,4*(+6-,
*'6-,(.%?.%,1(,&0+7.'+1/&+.8
Z
M.(06+(,1',&,(7&%.8,9.-,C,(.((1*',JQ>+1/9.+
Z
EH
M./*%8
3<+.%,.S/7&':.,*<,ChangeCipherSpec 4(:(=,&66,
(05(.[0.'+,+%&<<1/,.'/%-)+.8
Z
3/+0&6,(./0%.,+%&'()*%+,)%*+*/*6
Z
IH
36.%+
J44.81&+.6-,/6*(.( &,(.((1*'
Z
VH
○
\
."%'&/�'"- <*%,&0+7.'+1/&+1*'
U,)%*?18.,&881+1*'&6,1'<*,<*%,&,)0561/,9.-=,1'/6081':G
D@'.%,*<,4&+/71':,)%1?&+.,9.-
○
]&6181+-,$.S)1%&+1*',8&+.,&'8,+14.2
○
#05^./+,'&4.
○
J((0.%,'&4.
○
\
!%0(+.8,/.%+1<1/&+. U,81:1+&66-,(1:'.8,5-,&,9'*@',/.%+1<1/&+1*',&0+7*%1+-
T%*@(.%(,/*4.,@1+7,&,61(+,*<,+7.(.,&0+7*%1+1.(
○
\
;*'(
M.?*/&+1*'(,)*((156.
○
M.6&+1*',5.+@..','&4.,&'8,)%1'/1)&6
○
_(.%(,&%.,0(.8,+*,&//.)+,/.%+1<1/&+.(,@>,.%%*%(
○
Y.@,)*61/1.(,&%.,(+%1/+.%=,@71/7,/&',5.,&''*-1':
○
\
123 41&%'$0,)2%&50'")3"'6+%78
U,6*:1/&66-,/*''./+(,&,/61.'+>'.+@*%9,+*,&,'.+@*%9,?1&,&',.'/%-)+.8,/7&''.6
M*0+.(,)&/9.+(,5+@',81<<,'.+@*%9(\
!0''.6(,/&',5.,.(+&561(7.8,5-,!"#=,JB#./\
#./0%1+-,*'6-,5+@',+0''.6,.'8)*1'+( $.:H,]BY,/61.'+,&'8,:&+.@&-2H\
!%&<<1/,1',&',1'+.%'&6,'.+@*%9,'*+,(./0%.8,5-,]BYH
92!"#
U,&,)%*+*/*6,(01+.,*',Y.+@*%9,6&-.%
;&',&0+7.'+1/&+.,&'8,.'/%-)+,8&+&,<*%,.&/7,JB,)&/9.+,*<,&,/*440'1/&+1*'\
!%&'()*%+ 4*8.
B&-6*&8,1',JB,)&/9.+(,1(,.'/%-)+.8
○
J'+.:%1+-,*<,7.&8.%,)%*+./+.8
○
_(.8,$<*%,.:2,<*%,.'8R+*R.'8,/*44,5+@',I,8.?1/.(
○
\
!0''.61': 4*8.
;*4)6.+.,JB,)&/9.+(,.'/%-)+.8,&'8,/*'+&1'.8,1',&,'.@,JB,)&/9.+,@>,&,
'.@,7.&8.%
○
_(.8,<*%,]BY(,&'8,7*(+R+*R7*(+>'.+@*%9R+*R'.+@*%9,/*''./+1*'
○
\
:&%"60,,
U,&,5&%%1.%,5+@',4*%.,(./0%.,1'+.%'&6,'.+@*%9(,&'8,6.((,(./0%.,*0+(18.,'.+@*%9(,
$1H.H,+7.,J'+.%'.+2
L16+.%(,+%&<<1/,1',&'8,*0+,5&(.8,*',(./0%1+-,%06.(,8.<1'.8
B&/9.+,<16+.% <1%.@&66
D).%&+.(,*',Y.+@*%9,"&-.%,&'8,&5*?.
§
L16+.%(,5&(.8,*',(*0%/.,&'8,8.(+1'&+1*',JB,&88%.((.(=,)%*+*/*6=,
)*%+(=,/0%%.'+,(+&:.,*<,&,/*''./+1*'
§
#+&+1/,<16+.%1':,%06.,(.+
§
#+&'8&%8,(./0%1+-,4./7&'1(4(
§
;*(+R.<<./+1?.
§
○
\
A*@,1+,@*%9(
(>@,*<,<1%.@&66,1'()./+(,<1%(+,<.@,5-+.(,*<,!;B>_QB,7.&8.%(,1',&',JB,
)&/9.+
EH
L1'8(,&))61/&+1*',)%*+*/*6,&'8,)*%+ $.:H,A!!B,U,`a=,#b!B,U,IN2IH
D<+.',+%&<<1/,<%4,1'(18.,*0+,1(,&66*@.8
KS/.)+,@7.',.S)61/1+6-, 56*/9.8,$.:H,'.+@*%9,4&'&:.4.'+,+%&<<1/G,
#YbB,*',_QB,)*%+(,EPE=,EPI2
§
VH
!%&<<1/,<%4,*0+1(8.,1',(768,5.,56*/9.8,1<,'*+,.S)61/1+6-, ).%41++.8
Q1<<.%.'+,%06.(,<*%,.S1(+1':,C,'.@,/*''./+1*'(
§
Q.).'8(,*',&))(>(.%?1/.(,%0''1':,5.71'8,+7.,<1%.@&66
§
Y..8,+*,8.<1'.
#*0%/.,JB,&88%.((
3'-,&88%.((,(768,5.,&56.,+*,/*''./+,+*,&,@.5,(.%?.%
®
b&'&:.4.'+,&//.((,(768,5.,%.(+%1/+.8,+*,()./1<1/,JB,
&88%.((.(
®
Z
Q.(+1'&+1*',JB,&88%.((.(Z
U,JB,&88%.((,*<,+7.,(.%?.%,%0''1':,&,(.%?1/.,+7&+,(768,5.,
&//.((.8=,cc/&''*+,&66*@,^0(+,3Yd,JB,&88%.((
Q.(+1'&+1*',)*%+Z
U,()./1<1.(,+7.,(.%?1/.,&//.((.8,?1&,&,)&%+1/06&%,)*%+,$.:H,&,
@.5,(.%?.%,'..8(,1'/*41':,/*''./+1*'(,*',)*%+,`a,$A!!B2,
&'8,)*%+,OOV,$A!!B#2=,cc'.?.%,&66*@,^0(+,3Yd,)*%+
§
OH
\
X7.%.,+*,)6&/.
K((.'+1&6,<*%,B;( 50+,'*+,.'*0:7
○
J',7*4.'.+@*%9=,%*0+.% 0(0&66-,&6(*,&/+(,&(,<1%.@&66
○
B%*).%,)6&/1':,1',&,/*4)&'-,'.+@*%9,1(,14)+
J<,'*,'..8,+*,5.,81%./+6-,&//.((156.=,1'+.%'&6,'.+@*%9,$@>,B;(=,
(.%?.%(=,)%1'+.%(,.+/2
§
J<,'..8,+*,5.,81%./+6-,&//.((156.=,4&16,(.%?.%=,@.5,(.%?.%=,]BY,
:&+.@&-,.+/
§
○
\
Qbe\
U,&,f*'.,/*'(18.%.8,6.((,(./0%.,+7&',+7.,1'+.%'&6,'.+@*%9,50+,(+166,)%*+./+.8,
<%*4,81%./+,&//.((
L1%.@&66(,'*%4&66-,)6&/.8,5+@',J'+%&'.+,$"3Y2,&'8,.?.%-+71':,.6(.=,&(,
@.66,&(,5+@',J'+.%'.+,&'8,.?.%-+71':,.6(.
○
L16+.%1':,*0+:*1':,+%&<<1/
B%.?.'+,4&61/1*0(,(>@,<%*4,(.'81':,*0+,8&+&
○
T6*/9,JB,()**<1':
○
T6*/9,*0+5*0'8,+%&<<1/,<%4,/%1+1/&6, '.+@*%9,&%.&(>/*4)0+.%(
○
D'6-,&66*@,*0+5*0'8,A!!B,+%&<<1/,+7%*0:7,&,)%*S-
"*::1':,*<,8.'1.8,*0+5*0'8,+%&<<1/,/&',6.&8,+*,1'<./+1*',
8.+./+1*'
§
○
\
B%*?18.(,Y3! $Y.+@*%9,&'8,)*%+,388%.((,!%&'(6&+1*'2,&'8,)%*S1.(
Y3!G,1'+.%'&6,'.+@*%9,@71/7,0(.(,JB,&88%.((.(,'*+,?1(156.,+*,*0+(18.
○
B%*S1.(G,/&',718.,1'81?,8.?1/.(,1',+7.,J'+%&'.+
○
cc,5*+7,*<,+7.(.,&%.'g+,81%./+6-,(./0%1+-,<0'/+1*'&61+1.(=,50+,718.,(*4.,
1'<*,<%4,*0+(18.,&++&/9.%(
○
\
Y*+,.'*0:7=,(+166,'..8,4*%.,5./&0(.G
b*%.,&))(,/*''./+,1'+.%'&6,'.+@*%9(,+*,+7.,J'+.%'.+,$.:H,(*/1&6,
'.+@*%9(=,%.4*+.,&//.((,$.:H,MQB2=,0'1<1.68,4.((&:1':,$#9-).,.+/2=,
/*66&5*%&+1*',+**6(,$h**:6.,Q*/(=,D'.Y*+.,.+/2
○
B*%+R7*))1':,R&))(,/7&':.,)*%+(,80%1':,(.((1*'(
○
A181':,1',!"#,.'/%-)+1*'(,R!";,/&',4&(9,&)),+%&<<1/,$.:H,?1&,!;B,)*%+,
OOV2
○
Q*'g+,0(.,(+&'8&%8,)*%+(
○
!0''.6,1',*+7.%,(.%?1/.(,$.:H,BIB,<16.R(7&%1':=,4.((.':.%(,%0''1':,*?.%,
A!!B2
○
B.%14.+.%,(./0%1+-,7&(,*5?1*0(,/*'(+%&1'+(
;&'g+,7.6),&:&1'(+,1'+.%'&6,&++&/9(
§
A.6)6.((,*'/.,&++&/9,1(,(0//.((<06
§
○
;&'g+,/*'+%*6,&))(
○
\
JQ#,$J'+%0(1*',Q.+./+1*',#-(+.42
b*'1+*%( '.+@*%9,&'8>*%,(-(+.4,&/+1?1+1.(\
36.%+( @7.',)*+.'+1&66-,4&61/1*0(,&/+1?1+-,1(,<*0'8\
"*:(,1'<* &5*0+,&/+1?1+1.(\
cc,(7*068,&6@&-(,0(.G
3'*4&6-R5&(.8,R/&',8.+./+,0'9'*@',&++&/9(
○
#1:'&+0%.R5&(.8,8.+./+1*',R<&(+=,:.'.%&+.(,i,<&6(.,)*(1+1?.(=,'*,'..8,
6.&%'1':,)7&(.
○
\
JB#,$J'+%0(1*',B%.?.'+1*',#-(+.42
T&(1/&66-,JQ#,@1+7,&881+1*'&6,<0'/+1*'&61+-\
3++.4)+(,+*,56*/9>(+*),&/+1?.,<0'/+1*'&61+-\
;#'&+<=>+<&'+%&<?
Q.+./+,)*%+,(/&'( &'8,D#,<1':.%)%1'+1':,&++.4)+(\
"**9,<*%,()./1<1/ &++&/9(,$.:,50<<.%,*?.%<6*@2\
L1'8,&'8,56*/9,9'*@',4&6@&%.\
Q.+./+,#bT,)%*5.( $#.%?.%,b.((&:.,T6*/92\
L1'8,&'*4&61.(\
@"0#'&+<-
Q%*),4&61/1*0(,)&/9.+( &'8,(.'8,&6&%4(\
T6*/9(,+%&<<1/,<%4,(*4.,JB,&88%.((.(\
;*%%./+,<%&:4.'+&+1*' 1',)&/9.+,(+%.&4(\
M&1(.,&6.%+ R41:7+,+%1::.%,704&',1'+.%?.'+1*',5-,1'/18.'+,%.()*'(.,+.&4(\
3A:)43"B')A"<"%0'&+<):&%"60,,-8
B%*41(.,&',1'+.:%&+.8,(./0%1+-,&))%*&/7\
B%*S-,<*%,&66,+%&<<1/,$.?.',.'/%-)+.82\
b1:7+,5./*4.,?.%-,)*@.%<06,(./0%1+-,+**6(\
;*'(
B*61/-,%06.(,/*068,5./*4.,+**,/*4)6.S
○
B%*S-,<*%,!"#,.+/,R5%.&9(,.'8R+*R.'8,(./0%1+-
○
K'/&)(06&+.8,.'/%-)+1*',(+166,)*((156.
○
B%1?&/-,1((0.(
○
#1':6.,)*1'+,*<,&++&/9,@>,<066,&//.((,+*,8./%-)+.8,8&+&
○
\
;<'&=5&%$-)-C6D)5&%$-)-#0<<"%
;&',.<<1/1.'+6-,)%.?.'+,1'<./+1*'(,@1+7,9'*@',4&6@&%.
○
L1%(+,+71':,4&6@&%.,@&'+(,+*,4&'1)06&+.
○
_'&56.,+*,8.+./+,'.@,4&6@&%.
○
Week$11
!70%(8&-=, j,k0'.,IaE`
IVGIF
!"#$%&'()*%+'+#+,-
!"# $!%&'()*%+,"&-.%,#./0%1+-2
314(,+*,.(+&561(7,&,(7&%.8,9.-,+*,)%*+./+,4.((&:.(
;*'<18.'+1&61+-=,1'+.:%1+->&0+7.'+1/1+-
§
○
35*?.,!,6&-.%=,5.6*@,A!!B#,C,4&16,C,*+7.%(
○
D%1:1'&66-,##",$#./0%.,#*/9.+,"&-.%2=,%.)6&/.8, 1',EFFF
○
;0%%.'+,?.%G,!"#,EHI,&(,JK!L,ML;,NIOP
○
Q1<<1.RA.664&',9.-,.S/7&':. 0(.8,+*,/%.&+.,(7&%.8,(./%.+
3,&'8,T,)0561/6-,&:%..,*',?&60.(,:,&'8,'EH
3,:.'.%&+.(,%&'8*4,3,&'8,&U:34*8$'2IH
T,:.'.%&+.(,%&'8*4,T,&'8,5U:T4*8$'2
KS/7&':.,&,&'8,5VH
#7&%.8,9.-,1(,W,U,53U,:T3 U,:3T U,&T4*8$'2OH
X*%9(,5./&0(.,3,&'8,T,&%.,(./%.+,@716.,&,&'8,5,&%.,)0561/=,7&%8,
+*,/*4)0+.,+71(,81(/%.+.,6*:&%1+74
§
○
B7&(.(>(05R)%*+*/*6(
A&'8(7&9.
Y.:*+1&+.,)&%&4(Z
;&',&0+7.'+1/&+. (.%?.%,C,/61.'+=,@716.,1',A!!B#,4*(+6-,
*'6-,(.%?.%,1(,&0+7.'+1/&+.8
Z
M.(06+(,1',&,(7&%.8,9.-,C,(.((1*',JQ>+1/9.+Z
EH
M./*%8
3<+.%,.S/7&':.,*<,ChangeCipherSpec 4(:(=,&66,
(05(.[0.'+,+%&<<1/,.'/%-)+.8
Z
3/+0&6,(./0%.,+%&'()*%+,)%*+*/*6Z
IH
36.%+
J44.81&+.6-,/6*(.( &,(.((1*'Z
VH
○
\
."%'&/�'"- <*%,&0+7.'+1/&+1*'
U,)%*?18.,&881+1*'&6,1'<*,<*%,&,)0561/,9.-=,1'/6081':G
D@'.%,*<,4&+/71':,)%1?&+.,9.-
○
]&6181+-,$.S)1%&+1*',8&+.,&'8,+14.2
○
#05^./+,'&4.
○
J((0.%,'&4.
○
\
!%0(+.8,/.%+1<1/&+. U,81:1+&66-,(1:'.8,5-,&,9'*@',/.%+1<1/&+1*',&0+7*%1+-
T%*@(.%(,/*4.,@1+7,&,61(+,*<,+7.(.,&0+7*%1+1.(
○
\
;*'(
M.?*/&+1*'(,)*((156.
○
M.6&+1*',5.+@..','&4.,&'8,)%1'/1)&6
○
_(.%(,&%.,0(.8,+*,&//.)+,/.%+1<1/&+.(,@>,.%%*%(
○
Y.@,)*61/1.(,&%.,(+%1/+.%=,@71/7,/&',5.,&''*-1':
○
\
123 41&%'$0,)2%&50'")3"'6+%78
U,6*:1/&66-,/*''./+(,&,/61.'+>'.+@*%9,+*,&,'.+@*%9,?1&,&',.'/%-)+.8,/7&''.6
M*0+.(,)&/9.+(,5+@',81<<,'.+@*%9(
\
!0''.6(,/&',5.,.(+&561(7.8,5-,!"#=,JB#./
\
#./0%1+-,*'6-,5+@',+0''.6,.'8)*1'+( $.:H,]BY,/61.'+,&'8,:&+.@&-2H
\
!%&<<1/,1',&',1'+.%'&6,'.+@*%9,'*+,(./0%.8,5-,]BYH
92!"#
U,&,)%*+*/*6,(01+.,*',Y.+@*%9,6&-.%
;&',&0+7.'+1/&+.,&'8,.'/%-)+,8&+&,<*%,.&/7,JB,)&/9.+,*<,&,/*440'1/&+1*'
\
!%&'()*%+ 4*8.
B&-6*&8,1',JB,)&/9.+(,1(,.'/%-)+.8
○
J'+.:%1+-,*<,7.&8.%,)%*+./+.8
○
_(.8,$<*%,.:2,<*%,.'8R+*R.'8,/*44,5+@',I,8.?1/.(
○
\
!0''.61': 4*8.
;*4)6.+.,JB,)&/9.+(,.'/%-)+.8,&'8,/*'+&1'.8,1',&,'.@,JB,)&/9.+,@>,&,
'.@,7.&8.%
○
_(.8,<*%,]BY(,&'8,7*(+R+*R7*(+>'.+@*%9R+*R'.+@*%9,/*''./+1*'
○
\
:&%"60,,
U,&,5&%%1.%,5+@',4*%.,(./0%.,1'+.%'&6,'.+@*%9(,&'8,6.((,(./0%.,*0+(18.,'.+@*%9(,
$1H.H,+7.,J'+.%'.+2
L16+.%(,+%&<<1/,1',&'8,*0+,5&(.8,*',(./0%1+-,%06.(,8.<1'.8
B&/9.+,<16+.% <1%.@&66
D).%&+.(,*',Y.+@*%9,"&-.%,&'8,&5*?.
§
L16+.%(,5&(.8,*',(*0%/.,&'8,8.(+1'&+1*',JB,&88%.((.(=,)%*+*/*6=,
)*%+(=,/0%%.'+,(+&:.,*<,&,/*''./+1*'
§
#+&+1/,<16+.%1':,%06.,(.+
§
#+&'8&%8,(./0%1+-,4./7&'1(4(
§
;*(+R.<<./+1?.
§
○
\
A*@,1+,@*%9(
(>@,*<,<1%.@&66,1'()./+(,<1%(+,<.@,5-+.(,*<,!;B>_QB,7.&8.%(,1',&',JB,
)&/9.+
EH
L1'8(,&))61/&+1*',)%*+*/*6,&'8,)*%+ $.:H,A!!B,U,`a=,#b!B,U,IN2
IH
D<+.',+%&<<1/,<%4,1'(18.,*0+,1(,&66*@.8
KS/.)+,@7.',.S)61/1+6-, 56*/9.8,$.:H,'.+@*%9,4&'&:.4.'+,+%&<<1/G,
#YbB,*',_QB,)*%+(,EPE=,EPI2
§
VH
!%&<<1/,<%4,*0+1(8.,1',(768,5.,56*/9.8,1<,'*+,.S)61/1+6-, ).%41++.8
Q1<<.%.'+,%06.(,<*%,.S1(+1':,C,'.@,/*''./+1*'(
§
Q.).'8(,*',&))(>(.%?1/.(,%0''1':,5.71'8,+7.,<1%.@&66
§
Y..8,+*,8.<1'.
#*0%/.,JB,&88%.((
3'-,&88%.((,(768,5.,&56.,+*,/*''./+,+*,&,@.5,(.%?.%
®
b&'&:.4.'+,&//.((,(768,5.,%.(+%1/+.8,+*,()./1<1/,JB,
&88%.((.(
®
Z
Q.(+1'&+1*',JB,&88%.((.(Z
U,JB,&88%.((,*<,+7.,(.%?.%,%0''1':,&,(.%?1/.,+7&+,(768,5.,
&//.((.8=,cc/&''*+,&66*@,^0(+,3Yd,JB,&88%.((
Q.(+1'&+1*',)*%+Z
U,()./1<1.(,+7.,(.%?1/.,&//.((.8,?1&,&,)&%+1/06&%,)*%+,$.:H,&,
@.5,(.%?.%,'..8(,1'/*41':,/*''./+1*'(,*',)*%+,`a,$A!!B2,
&'8,)*%+,OOV,$A!!B#2=,cc'.?.%,&66*@,^0(+,3Yd,)*%+
§
OH
\
X7.%.,+*,)6&/.
K((.'+1&6,<*%,B;( 50+,'*+,.'*0:7
○
J',7*4.'.+@*%9=,%*0+.% 0(0&66-,&6(*,&/+(,&(,<1%.@&66
○
B%*).%,)6&/1':,1',&,/*4)&'-,'.+@*%9,1(,14)+
J<,'*,'..8,+*,5.,81%./+6-,&//.((156.=,1'+.%'&6,'.+@*%9,$@>,B;(=,
(.%?.%(=,)%1'+.%(,.+/2
§
J<,'..8,+*,5.,81%./+6-,&//.((156.=,4&16,(.%?.%=,@.5,(.%?.%=,]BY,
:&+.@&-,.+/
§
○
\
Qbe\
U,&,f*'.,/*'(18.%.8,6.((,(./0%.,+7&',+7.,1'+.%'&6,'.+@*%9,50+,(+166,)%*+./+.8,
<%*4,81%./+,&//.((
L1%.@&66(,'*%4&66-,)6&/.8,5+@',J'+%&'.+,$"3Y2,&'8,.?.%-+71':,.6(.=,&(,
@.66,&(,5+@',J'+.%'.+,&'8,.?.%-+71':,.6(.
○
L16+.%1':,*0+:*1':,+%&<<1/
B%.?.'+,4&61/1*0(,(>@,<%*4,(.'81':,*0+,8&+&
○
T6*/9,JB,()**<1':
○
T6*/9,*0+5*0'8,+%&<<1/,<%4,/%1+1/&6, '.+@*%9,&%.&(>/*4)0+.%(
○
D'6-,&66*@,*0+5*0'8,A!!B,+%&<<1/,+7%*0:7,&,)%*S-
"*::1':,*<,8.'1.8,*0+5*0'8,+%&<<1/,/&',6.&8,+*,1'<./+1*',
8.+./+1*'
§
○
\
B%*?18.(,Y3! $Y.+@*%9,&'8,)*%+,388%.((,!%&'(6&+1*'2,&'8,)%*S1.(
Y3!G,1'+.%'&6,'.+@*%9,@71/7,0(.(,JB,&88%.((.(,'*+,?1(156.,+*,*0+(18.
○
B%*S1.(G,/&',718.,1'81?,8.?1/.(,1',+7.,J'+%&'.+
○
cc,5*+7,*<,+7.(.,&%.'g+,81%./+6-,(./0%1+-,<0'/+1*'&61+1.(=,50+,718.,(*4.,
1'<*,<%4,*0+(18.,&++&/9.%(
○
\
Y*+,.'*0:7=,(+166,'..8,4*%.,5./&0(.G
b*%.,&))(,/*''./+,1'+.%'&6,'.+@*%9(,+*,+7.,J'+.%'.+,$.:H,(*/1&6,
'.+@*%9(=,%.4*+.,&//.((,$.:H,MQB2=,0'1<1.68,4.((&:1':,$#9-).,.+/2=,
/*66&5*%&+1*',+**6(,$h**:6.,Q*/(=,D'.Y*+.,.+/2
○
B*%+R7*))1':,R&))(,/7&':.,)*%+(,80%1':,(.((1*'(
○
A181':,1',!"#,.'/%-)+1*'(,R!";,/&',4&(9,&)),+%&<<1/,$.:H,?1&,!;B,)*%+,
OOV2
○
Q*'g+,0(.,(+&'8&%8,)*%+(
○
!0''.6,1',*+7.%,(.%?1/.(,$.:H,BIB,<16.R(7&%1':=,4.((.':.%(,%0''1':,*?.%,
A!!B2
○
B.%14.+.%,(./0%1+-,7&(,*5?1*0(,/*'(+%&1'+(
;&'g+,7.6),&:&1'(+,1'+.%'&6,&++&/9(
§
A.6)6.((,*'/.,&++&/9,1(,(0//.((<06
§
○
;&'g+,/*'+%*6,&))(
○
\
JQ#,$J'+%0(1*',Q.+./+1*',#-(+.42
b*'1+*%( '.+@*%9,&'8>*%,(-(+.4,&/+1?1+1.(\
36.%+( @7.',)*+.'+1&66-,4&61/1*0(,&/+1?1+-,1(,<*0'8\
"*:(,1'<* &5*0+,&/+1?1+1.(\
cc,(7*068,&6@&-(,0(.G
3'*4&6-R5&(.8,R/&',8.+./+,0'9'*@',&++&/9(
○
#1:'&+0%.R5&(.8,8.+./+1*',R<&(+=,:.'.%&+.(,i,<&6(.,)*(1+1?.(=,'*,'..8,
6.&%'1':,)7&(.
○
\
JB#,$J'+%0(1*',B%.?.'+1*',#-(+.42
T&(1/&66-,JQ#,@1+7,&881+1*'&6,<0'/+1*'&61+-\
3++.4)+(,+*,56*/9>(+*),&/+1?.,<0'/+1*'&61+-\
;#'&+<=>+<&'+%&<?
Q.+./+,)*%+,(/&'( &'8,D#,<1':.%)%1'+1':,&++.4)+(\
"**9,<*%,()./1<1/ &++&/9(,$.:,50<<.%,*?.%<6*@2\
L1'8,&'8,56*/9,9'*@',4&6@&%.\
Q.+./+,#bT,)%*5.( $#.%?.%,b.((&:.,T6*/92\
L1'8,&'*4&61.(\
@"0#'&+<-
Q%*),4&61/1*0(,)&/9.+( &'8,(.'8,&6&%4(\
T6*/9(,+%&<<1/,<%4,(*4.,JB,&88%.((.(\
;*%%./+,<%&:4.'+&+1*' 1',)&/9.+,(+%.&4(\
M&1(.,&6.%+ R41:7+,+%1::.%,704&',1'+.%?.'+1*',5-,1'/18.'+,%.()*'(.,+.&4(\
3A:)43"B')A"<"%0'&+<):&%"60,,-8
B%*41(.,&',1'+.:%&+.8,(./0%1+-,&))%*&/7\
B%*S-,<*%,&66,+%&<<1/,$.?.',.'/%-)+.82\
b1:7+,5./*4.,?.%-,)*@.%<06,(./0%1+-,+**6(\
;*'(
B*61/-,%06.(,/*068,5./*4.,+**,/*4)6.S
○
B%*S-,<*%,!"#,.+/,R5%.&9(,.'8R+*R.'8,(./0%1+-
○
K'/&)(06&+.8,.'/%-)+1*',(+166,)*((156.
○
B%1?&/-,1((0.(
○
#1':6.,)*1'+,*<,&++&/9,@>,<066,&//.((,+*,8./%-)+.8,8&+&
○
\
;<'&=5&%$-)-C6D)5&%$-)-#0<<"%
;&',.<<1/1.'+6-,)%.?.'+,1'<./+1*'(,@1+7,9'*@',4&6@&%.
○
L1%(+,+71':,4&6@&%.,@&'+(,+*,4&'1)06&+.
○
_'&56.,+*,8.+./+,'.@,4&6@&%.
○
Week$11
!70%(8&-=, j,k0'.,IaE` IVGIF
Document Summary
Aims to establish a shared key to protect messages. Above t layer, below https & mail & others. Originally ssl (secure socket layer), replaced in 1999. Current ver: tls 1. 2 as ietf rfc 5246. Diffie-hellman key exchange used to create shared secret. A and b publicly agree on values g and n. Shared key is k = ba = gba = gab = abmod(n) Works because a and b are secret while a and b are public, hard to compute this discrete logarithm. Can authenticate server & client, while in https mostly only server is authenticated. Results in a shared key & session id/ticket. After exchange of changecipherspec msgs, all subsequent traffic encrypted. = provide additional info for a public key, including: Trusted certificate = digitally signed by a known certification authority. Browsers come with a list of these authorities. Users are used to accept certificates w/ errors. New policies are stricter, which can be annoying.
