Network Security
A cipher suite specifies one algorithm for each of the following tasks: * Key exchange * Bulk encryption * Message authentication So you may see something like: PSK-AES-SHA256 Key exchange algorithms Key exchange algorithms protect information required to create shared keys. These algorithms are asymmetric (public key algorithms) and perform well for relatively
Network Security
SSL is the predecessor to TLS * SSL 1.0 was never released to public * SSLv2 in 1995, deprecated in 2011 (link) * SSL v3 in 1996, deprecated in 2015 (link) * TLS 1.1 in 1999 * TLS 1.2 in 2008 * TLS 1.3 currently in draft (link) References * https://www.globalsign.
Network Security
https://security.stackexchange.com/questions/9957/can-i-use-a-private-key-as-a-public-key-and-vice-versa
Network Security
What is certificate A electronic document with the following info 1. Who issued the certificate 2. Who the certificate is issued to 3. Valid to date (expiry date) 4. Public key 5. Digital signature Hash value of the certificate, used private key to sign the key -> digital signature
Network Security
It happens in all HTTPS connections. Certificate phase, chose cipher suite 1. Client send hello, with supported cipher/version all other information 2. Server send hello, with certificate, and done hello 3. Premaster key done Symetric key exchange using asymetric public key in certificate 1. Computer installed many CA 2.
Network Security
The seven Open Systems Interconnection layers * Layer 7: The application layer * Layer 6: The presentation layer * Layer 5: The session layer * Layer 4: The transport layer * Layer 3: The network layer * Layer 2: The data-link layer * Layer 1: The physical layer References https://searchnetworking.techtarget.com/definition/OSI