Enhancement of TLS Implementation of BouncyCastle Guilherme - PowerPoint PPT Presentation

Enhancement of TLS Implementation of BouncyCastle Guilherme Francescon Cittolin

Transport Layer Security ● General Cryptographic Protocol ● Successor of the SSL ● Works over TCP ○ UDP version: DTLS (RFC 6347)

Goals ● Provide confidentiality and message integrity ○ Asymmetric cryptography for key exchange ○ Symmetric cryptography ○ MAC - Message Authentication Codes

RFCs ● TLS 1.0: RFC 2246 ● TLS 1.1: RFC 4346 ● TLS 1.2: RFC 5246

OSI Model

Protocol layers ● Record layer (Record Protocol) ○ Fragmentation ○ Compression ○ Authentication ○ Encryption ● Handshake layer ○ Handshake Protocol ○ Change Cipher Spec Protocol ○ Alert Protocol ○ Application Protocol

Implementations - Browsers

Implementations - Libraries ● OpenSSL ● GnuTLS ● Cryptlib ● MatrixSSL ● JSSE

Differences from previous versions ● Pseudorandom Functions ○ Before: MD5 / SHA-1 ○ Cipher-suite-specified (SHA - 256) ● Advanced Encryption Standard Cipher- suites added ● Minor changes

Differences from previous versions ● RFC 6176 ○ Support to SSL dropped