TLS - 版本历史

Riguz：/* Overview */

2024-02-01T10:56:43Z

Overview

@@ 第37行： / 第37行： @@
 * A full <syntaxhighlight lang="bash" inline>1-RTT</syntaxhighlight> handshake, in which the client is able to send application data after one round trip and the server immediately responds after receiving the first handshake message from the client.
 * A <syntaxhighlight lang="bash" inline>0-RTT</syntaxhighlight> handshake, in which the client uses information it has previously learned about the server to send application data immediately. This application data can be replayed by an attacker, so 0-RTT is not suitable for carrying instructions that might initiate any action that could cause unwanted effects if replayed.
 == Handshake ==

Riguz：/* Overview */

2024-01-29T20:19:41Z

Overview

←上一版本		2024年1月29日 (一) 20:19的版本
第31行：		第31行：
	Each content-layer message (e.g., handshake, alerts, and application data) is carried as a series of typed TLS records by the record layer. Records are individually cryptographically protected and then transmitted over a reliable transport (typically TCP), which provides sequencing and guaranteed delivery.		Each content-layer message (e.g., handshake, alerts, and application data) is carried as a series of typed TLS records by the record layer. Records are individually cryptographically protected and then transmitted over a reliable transport (typically TCP), which provides sequencing and guaranteed delivery.

			TLS supports both pre-shared key (PSK) and Diffie-Hellman over either finite fields or elliptic curves ((EC)DHE) key exchanges. PSK is the basis for Early Data (0-RTT); the latter provides forward secrecy (FS) when the (EC)DHE keys are destroyed.

			TLS provides two basic handshake modes of interest to QUIC:

			* A full <syntaxhighlight lang="bash" inline>1-RTT</syntaxhighlight> handshake, in which the client is able to send application data after one round trip and the server immediately responds after receiving the first handshake message from the client.
			* A <syntaxhighlight lang="bash" inline>0-RTT</syntaxhighlight> handshake, in which the client uses information it has previously learned about the server to send application data immediately. This application data can be replayed by an attacker, so 0-RTT is not suitable for carrying instructions that might initiate any action that could cause unwanted effects if replayed.

	== Handshake ==		== Handshake ==

2024年1月29日 (一) 20:17 Riguz

2024-01-29T20:17:43Z

←上一版本		2024年1月29日 (一) 20:17的版本
第13行：		第13行：

	Many of the major vulnerabilities in TLS 1.2 had to do with older cryptographic algorithms that were still supported. TLS 1.3 drops support for these vulnerable cryptographic algorithms, and as a result it is less vulnerable to cyber attacks.		Many of the major vulnerabilities in TLS 1.2 had to do with older cryptographic algorithms that were still supported. TLS 1.3 drops support for these vulnerable cryptographic algorithms, and as a result it is less vulnerable to cyber attacks.

			= Overview=
			Internally, TLS is a layered protocol:

			<syntaxhighlight lang="bash">
			+-------------+------------+--------------+---------+
			Content \| \| \| Application \| \|
			Layer \| Handshake \| Alerts \| Data \| ... \|
			\| \| \| \| \|
			+-------------+------------+--------------+---------+
			Record \| \|
			Layer \| Records \|
			\| \|
			+---------------------------------------------------+
			</syntaxhighlight>

			Each content-layer message (e.g., handshake, alerts, and application data) is carried as a series of typed TLS records by the record layer. Records are individually cryptographically protected and then transmitted over a reliable transport (typically TCP), which provides sequencing and guaranteed delivery.


	== Handshake ==		== Handshake ==

Riguz：/* Key exchange */

2024-01-29T19:32:20Z

Key exchange

←上一版本		2024年1月29日 (一) 19:32的版本
第19行：		第19行：

	== Key exchange ==		== Key exchange ==
	It recommends support for X25519, Ed25519, X448, and Ed448 algorithms.<ref>[https://datatracker.ietf.org/doc/html/rfc8446 RFC8446 - The Transport Layer Security (TLS) Protocol Version 1.3]</ref>		It recommends support for [[X25519]], Ed25519, X448, and Ed448 algorithms.<ref>[https://datatracker.ietf.org/doc/html/rfc8446 RFC8446 - The Transport Layer Security (TLS) Protocol Version 1.3]</ref>


	[[Category:Network]]		[[Category:Network]]

Riguz：/* Handshake */

2024-01-29T19:31:55Z

Handshake

←上一版本		2024年1月29日 (一) 19:31的版本
第18行：		第18行：
	[[Image:tls1.3-handshake.webp\|600px]]<ref>https://www.a10networks.com/glossary/key-differences-between-tls-1-2-and-tls-1-3/</ref>		[[Image:tls1.3-handshake.webp\|600px]]<ref>https://www.a10networks.com/glossary/key-differences-between-tls-1-2-and-tls-1-3/</ref>

	~~Ref:~~		== Key exchange ==
	* [https://datatracker.ietf.org/doc/html/rfc8446 RFC8446 - The Transport Layer Security (TLS) Protocol Version 1.3]		It recommends support for X25519, Ed25519, X448, and Ed448 algorithms.<ref>[https://datatracker.ietf.org/doc/html/rfc8446 RFC8446 - The Transport Layer Security (TLS) Protocol Version 1.3]</ref>

	[[Category:Network]]		[[Category:Network]]

2024年1月29日 (一) 19:28 Riguz

2024-01-29T19:28:07Z

←上一版本		2024年1月29日 (一) 19:28的版本
第17行：		第17行：

	[[Image:tls1.3-handshake.webp\|600px]]<ref>https://www.a10networks.com/glossary/key-differences-between-tls-1-2-and-tls-1-3/</ref>		[[Image:tls1.3-handshake.webp\|600px]]<ref>https://www.a10networks.com/glossary/key-differences-between-tls-1-2-and-tls-1-3/</ref>

			Ref:
			* [https://datatracker.ietf.org/doc/html/rfc8446 RFC8446 - The Transport Layer Security (TLS) Protocol Version 1.3]

	[[Category:Network]]		[[Category:Network]]

Riguz：/* Handshake */

2023-12-15T08:51:15Z

Handshake

←上一版本		2023年12月15日 (五) 08:51的版本
第15行：		第15行：

	== Handshake ==		== Handshake ==
	[[Image:tls1.3-handshake.webp\|600px]]
			[[Image:tls1.3-handshake.webp\|600px]]<ref>https://www.a10networks.com/glossary/key-differences-between-tls-1-2-and-tls-1-3/</ref>

	[[Category:Network]]		[[Category:Network]]

Riguz：/* Handshake */

2023-12-15T08:48:50Z

Handshake

←上一版本		2023年12月15日 (五) 08:48的版本
第15行：		第15行：

	== Handshake ==		== Handshake ==
	[[Image:tls1.3-handshake.~~png~~\|600px]]		[[Image:tls1.3-handshake.webp\|600px]]

	[[Category:Network]]		[[Category:Network]]

Riguz：/* TLS 1.3 */

2023-12-15T08:48:22Z

TLS 1.3

←上一版本		2023年12月15日 (五) 08:48的版本
第14行：		第14行：
	Many of the major vulnerabilities in TLS 1.2 had to do with older cryptographic algorithms that were still supported. TLS 1.3 drops support for these vulnerable cryptographic algorithms, and as a result it is less vulnerable to cyber attacks.		Many of the major vulnerabilities in TLS 1.2 had to do with older cryptographic algorithms that were still supported. TLS 1.3 drops support for these vulnerable cryptographic algorithms, and as a result it is less vulnerable to cyber attacks.

			== Handshake ==
			[[Image:tls1.3-handshake.png\|600px]]

	[[Category:Network]]		[[Category:Network]]

Riguz：/* TLS 1.3 */

2023-12-15T05:00:29Z

TLS 1.3

←上一版本		2023年12月15日 (五) 05:00的版本
第10行：		第10行：
	TLS 1.3 was defined in RFC 8446 in August 2018. It is based on the earlier TLS 1.2 specification. Major differences from TLS 1.2 include:		TLS 1.3 was defined in RFC 8446 in August 2018. It is based on the earlier TLS 1.2 specification. Major differences from TLS 1.2 include:

			In a nutshell, TLS 1.3 is faster and more secure than TLS 1.2. One of the changes that makes TLS 1.3 faster is an update to the way a TLS handshake works: TLS handshakes in TLS 1.3 only require one round trip (or back-and-forth communication) instead of two, shortening the process by a few milliseconds. And in cases when the client has connected to a website before, the TLS handshake will have zero round trips. This makes HTTPS connections faster, cutting down latency and improving the overall user experience<ref>https://www.cloudflare.com/learning/ssl/why-use-tls-1.3/</ref>.

			Many of the major vulnerabilities in TLS 1.2 had to do with older cryptographic algorithms that were still supported. TLS 1.3 drops support for these vulnerable cryptographic algorithms, and as a result it is less vulnerable to cyber attacks.

TLS - 版本历史

Riguz：​/* Overview */

Riguz：​/* Overview */

2024年1月29日 (一) 20:17 Riguz

Riguz：​/* Key exchange */

Riguz：​/* Handshake */

2024年1月29日 (一) 19:28 Riguz

Riguz：​/* Handshake */

Riguz：​/* Handshake */

Riguz：​/* TLS 1.3 */

Riguz：​/* TLS 1.3 */

Riguz：/* Overview */

Riguz：/* Overview */

Riguz：/* Key exchange */

Riguz：/* Handshake */

Riguz：/* Handshake */

Riguz：/* Handshake */

Riguz：/* TLS 1.3 */

Riguz：/* TLS 1.3 */