Question

Describe how SSL/TLS works. Address issues such as the different key establishment mechanisms and the role that certificates play. Also mention their Construction of the Algorithm (if applicable) , Security/ Attacks , Efficiency (if applicable) and Application

Answer 1

SSL- Secure Socket Layer : It's a networking protocol used for securing the connections between web servers and web clients over an insecure system/network,like the web/internet.

TLS- Transport Layer System is a better and upgraded version of Secure Socket Layer and it's more secure.

SSL/TLS works:

The fundamental standard is that when SSL certificate is installed on the server,and browser is connected to it, then the the SSL certificate present triggers the SSL/TLS standard/protocol that encrypts the information which is sent between the server and the client(browser).

SSL works straightforwardly over the TCP, successfully filling in as a security cover. It permits higher convention layers to stay unaltered while as yet providing secure connection. Such that the other protocols can work properly under the SSL layer  So underneath the SSL layer, the other convention layers can work as ordinary.

The different key establishment mechanisms and the role that certificates play:

In TLS, all security begins with an identity of cryptographic server; a solid private key is expected to keep attackers from doing pantomime attacks. Similarly critical is to have a legitimate and solid authentication, that gives the private key the privilege to speak to a specific hostname. If an SSL certificate(authentication) is being utilized accurately, an attacker can only see which port and IP are connected and generally how much information is being sent. They might can terminate the connection however both the server and client will almost certainly tell this hosts been finished by a third party. Thus, no information can be intercepted by them that makes it basically an ineffectual step.

Construction of the Algorithm (if applicable) , Security/ Attacks , Efficiency (if applicable) and Application:

• RSA algorithm: It can be used within TLS protocol/standard for key exchange and authentication. It's an asymmetric encryption cipher. it makes use of two keys which are related mathematically such that the content which is encrypted by 1 key can be decrypted only by the other key
• Diffie-Hellman Key Exchange: this algorithm permits 2 parties(unknown to each other), to exchange a key securely, despite the third-party might be noticing all the communications. The key feature is that it doesn't encrypts the data in actual but each party creates the same key on the basis of exchange of an unencrypted data.