book

Implementing SSL/TLS Using Cryptography and PKI

by Joshua Davies

January 2011

Intermediate to advanced

696 pages

16h 56m

English

Wiley

Read now

Unlock full access

Supplemental Web SitesRoadmap and Companion Source CodeOutline of the BookHow to Read This Book
What Are Secure Sockets?Insecure Communications: Understanding the HTTP ProtocolRoadmap for the Rest of This Book
Understanding Block Cipher Cryptography AlgorithmsUnderstanding Stream Cipher Algorithms
Understanding the Theory Behind the RSA AlgorithmPerforming Arbitrary Precision Binary Math to Implement Public-Key CryptographyEncryption and Decryption with RSAAchieving Perfect Forward Secrecy with Diffie-Hellman Key ExchangeGetting More Security per Key Bit: Elliptic Curve CryptographyMaking ECC Work with Whole Integers: Elliptic-Curve Cryptography over Fp
Using Message Digests to Create Secure Document Surrogates
Putting It Together: The Secure Channel ProtocolEncoding with ASN.1Developing an ASN.1 ParserManaging CertificatesOther Problems with Certificates
Implementing the TLS 1.0 Handshake (Client Perspective)Secure Data Transfer with TLSImplementing TLS ShutdownExamining HTTPS End-to-End Examples (TLS 1.0)Differences Between SSL 3.0 and TLS 1.0Differences Between TLS 1.0 and TLS 1.1
Implementing the TLS 1.0 Handshake from the Server's PerspectiveAvoiding Common Pitfalls When Adding HTTPS Support to a ServerWhen a Browser Displays Errors: Browser Trust Issues
Passing Additional Information with Client Hello ExtensionsSafely Reusing Key Material with Session ResumptionAvoiding Fixed Parameters with Ephemeral Key ExchangeVerifying Identity with Client AuthenticationDealing with Legacy Implementations: Exportable CiphersDiscarding Key Material Through Session Renegotiation
Supporting TLS 1.2 When You Use RSA for the Key ExchangeImpact to Diffie-Hellman Key ExchangeAdding Support for AEAD Mode CiphersWorking ECC Extensions into the TLS LibraryThe Current State of TLS 1.2
Adding the NTTPS Extension to the NTTP AlgorithmImplementing "Multi-hop" SMTP over TLS and Protecting Email Content with S/MIMESecuring Datagram TrafficSupporting SSL When Proxies Are InvolvedSSL with OpenSSL
The Decimal and Binary Numbering SystemsUnderstanding Binary Logical OperationsTwo's-Complement Representation of Negative NumbersBig-Endian versus Little-Endian Number Formats
Installing TCPDumpInstalling OpenSSL
Implementing the SSL Handshake

Content preview from Implementing SSL/TLS Using Cryptography and PKI

About the Technical Editor

David Chapa is a Senior Analyst with the Enterprise Strategy Group covering the Data Protection segment with a focus on Disaster Recovery, Backup/Recovery as a Service, and Availability Solutions. David has invested over 25 years in the computer industry, focusing specifically on data protection, data disaster recovery, and business resumption practices. He has held several senior level technical positions with companies such as Cheyenne Software, OpenVision, ADIC, Quantum, and NetApp. Prior to joining ESG, as Director of Data Protection Strategy and Global Alliances for NetApp, David continued to evangelize "Recovery and Backup," his mantra for over a decade now, and the benefits of integrating software solutions with disk-based backup. In his role with ESG, David will bring all of this expertise, knowledge, and passion to raise a greater holistic awareness around data protection. David is an energetic and dynamic speaker who brings a great deal of experiential knowledge, humor, and keen insight to his audience. He has been a featured speaker at VERITAS Vision, CA World, SNW, Chicago Software Association, and CAMP/IT Conferences, and has served as panelist on various discussions related to disaster recovery, compliance, and the use of disk, tape, and cloud for recovery and backup strategies.

David has written several articles and blogs over the years. In addition, he is the co-author of Implementing Backup and Recovery, the Technical Editor of Cloud ...