Security Protocols Part 9 SSL Protocol Recap Digital Certificate - - PowerPoint PPT Presentation

security protocols
SMART_READER_LITE
LIVE PREVIEW

Security Protocols Part 9 SSL Protocol Recap Digital Certificate - - PowerPoint PPT Presentation

Security Protocols Part 9 SSL Protocol Recap Digital Certificate Authentication Integrity Non-repudiation CA (Certification Authority) Issue digital certificates (via digital signature) Publish/Distribute digital


slide-1
SLIDE 1

Security Protocols

Part 9 SSL Protocol

slide-2
SLIDE 2

Recap

  • Digital Certificate

– Authentication – Integrity – Non-repudiation

  • CA (Certification Authority)

– Issue digital certificates (via digital signature) – Publish/Distribute digital certificates, help verify – Revoke digital certificates

  • Key Exchange Protocol (Diffie-Hellman, 2 primes)
slide-3
SLIDE 3

Successful SSL = padlock

slide-4
SLIDE 4

Padlock = layman’s icon for session security*

slide-5
SLIDE 5

Getting into the details of a server certificate

slide-6
SLIDE 6

Leaf-CA

slide-7
SLIDE 7

Intermediate-CA

slide-8
SLIDE 8

Certificate Details: Cert Extension SAN

slide-9
SLIDE 9

Certificate Details: Cert Extension CRL, OCSP

slide-10
SLIDE 10
slide-11
SLIDE 11

Root-CA

slide-12
SLIDE 12

Broken padlock = ?

slide-13
SLIDE 13

Exercise

  • Write the SSL protocol in the notations we

used to describe earlier protocols

– A digital certificate issued by Sam to Alice is denoted by {A, S, KA, V, E}kS – You may skip notations for “certificate validity – V” and “certificate extension – E” and their implications – Make use of Diffie-Hellman Key Exchange Protocol