Sid Rubey

Purpose of Project:

• Study Secure Socket Layer (SSL) Protocol and how Java implements SSL
• Implement environment using JSSE
• Along the way..., learned about Public-Key Cryptography, Java's keytool

Outline:

1. SSL Protocol
2. JSSE, comprising packages
3. Running environment - "Sid's Secure Server"

• Protocol above TCP/IP in Network Layer of OSI Model, and below HTTP, etc., in Application layer

  

• Using public-key cryptography, SSL addresses security problems
  1. Eavesdropping - use "keys" for encryption/decryption
     • Privacy compromised
  2. Tampering - digital signature = encrypted hash + other info
     • Data is changed or replaced in transit

       

  3. Impersonation - certificates identify individual, server, company
     • Spoofing - pretend to be someone else 
     • Misrepresentation - person or organization misrepresents itself
• SSL handshake summary
  1. Client sends server info ( SSL version, cipher settings, etc.. )
  2. Server sends client corresponding info and its certificate; optionally, can request client's certificate
  3. Client authenticates server ( or terminates connection )
  4. Client creates premaster secret with server's public-key
  5. Client can include data with its own certificate, if requested; info sent
  6. Server authenticates client if needed; uses private key to decrypt premaster secret, and generates master secret
  7. Client and server use master secret to generate session keys, which are symmetric keys
  8. Client sends message to server informing that all messages will be encrypted with session key; sends message that client portion of handshake is complete
  9. Server sends message to client informing that all messages will be encrypted with session key; sends message that server portion of handshake is complete
  10. SSL handshake is complete, and secure SSL session has begun

  - learned about SSL, JSSE, PKC, keytool

  - implemented/modified code for SecureServer.java

  - established https: connection on home network, able to establish connection from internet with home computer's IP address

  - implement secure client/browser for mutual authentication