SSL and TLS. Theory and Practice

SSL and TLS Theory and Practice Second Edition
	Contents
	Preface
	References
	Acknowledgments
	Chapter 1
Introduction
		1.1 INFORMATION AND NETWORK SECURITY
			1.1.1 Security Services
			1.1.2 Security Mechanisms
		1.2 TRANSPORT LAYER SECURITY
		1.3 FINAL REMARKS
		References
	Chapter 2
SSL Protocol
		2.1 INTRODUCTION
		2.2 PROTOCOLS
			2.2.1 SSL Record Protocol
			2.2.2 SSL Handshake Protocol
			2.2.3 SSL Change Cipher Spec Protocol
			2.2.4 SSL Alert Protocol
			2.2.5 SSL Application Data Protocol
		2.3 PROTOCOL EXECUTION TRANSCRIPT
		2.4 SECURITY ANALYSES AND ATTACKS
		2.5 FINAL REMARKS
		References
	Chapter 3
TLS Protocol
		3.1 INTRODUCTION
			3.1.1 TLS PRF
			3.1.2 Generation of KeyingMaterial
		3.2 TLS 1.0
			3.2.1 Cipher Suites
			3.2.2 CertificateManagement
			3.2.3 Alert Messages
			3.2.4 Other Differences
		3.3 TLS 1.1
			3.3.1 Cryptographic Subtleties
			3.3.2 Cipher Suites
			3.3.3 CertificateManagement
			3.3.4 Alert Messages
			3.3.5 Other Differences
		3.4 TLS 1.2
			3.4.1 TLS Extensions
			3.4.2 Cipher Suites
			3.4.3 CertificateManagement
			3.4.4 Alert Messages
			3.4.5 Other Differences
		3.5 TLS 1.3
			3.5.1 Cipher Suites
			3.5.2 CertificateManagement
			3.5.3 Alert Messages
			3.5.4 Other Differences
		3.6 HSTS
		3.7 PROTOCOL EXECUTION TRANSCRIPT
		3.8 SECURITY ANALYSES AND ATTACKS
			3.8.1 Renegotiation Attack
			3.8.2 Compression-Related Attacks
			3.8.3 More Recent Padding Oracle Attacks
			3.8.4 Key Exchange Downgrade Attacks
			3.8.5 FREAK
			3.8.6 Logjam
		3.9 FINAL REMARKS
		References
	Chapter 4
DTLS Protocol
		4.1 INTRODUCTION
		4.2 BASIC PROPERTIES AND DISTINGUISHING FEATURES
		4.2.1 Record Protocol
		4.2.2 Handshake Protocol
		4.3 SECURITY ANALYSIS
		4.4 FINAL REMARKS
		References
	Chapter 5 Firewall Traversal
		5.1 INTRODUCTION
		5.2 SSL/TLS TUNNELING
		5.3 SSL/TLS PROXYING
		5.4 FINAL REMARKS
		References
	Chapter 6 Public Key Certificates and Internet Public
Key Infrastructure (PKI)
		6.1 INTRODUCTION
		6.2 X.509 CERTIFICATES
			6.2.1 Certificate Format
			6.2.2 Hierarchical Trust Model
		6.3 SERVER CERTIFICATES
		6.4 CLIENT CERTIFICATES
		6.5 PROBLEMS AND PITFALLS
		6.6 NEW APPROACHES
		6.7 FINAL REMARKS
		References
	Chapter 7
Concluding Remarks
		References
	Appendix A
Registered TLS Cipher Suites
	Appendix B
Padding Oracle Attacks
		B.1 BLEICHENBACHER ATTACK
		B.2 VAUDENAY ATTACK
		References
	Appendix C
Abbreviations and Acronyms
	About the Author
	Index