[SSL/TLS] Handshake

new session ticket

1. clent -> server Client Hello
   • generate Random Number (RNc)
   • preferred Cipher Suites
2. clent <- server Server Hello
   • generate Random Number (RNs)
   • selected Cipher Suite
3. clent <- server Certificate
   • include server public key
     
4. clent <- server Hello Done
5. clent -> server Client Key Exchange
   • generate Pre Master Secret (PMS) and encrypted with server public key
6. clent -> server Change Cipher Spec
   • caculate Master Secret (MS) as Symmetric key from PMS, RNs, RNc
7. clent -> server Client Finished (Enc.)
8. clent <- server Change Cipher Spec
   • caculate Master Secret (MS) as Symmetric key from PMS, RNs, RNc
9. clent <- server Server Finished (Enc.)
10. clent <-> server Data (Enc.)

within a session

1. clent -> server Client Hello
2. clent <- server Server Hello
3. clent <- server Change Cipher Spec
4. clent <- server Server Finished (Enc.)
5. clent -> server Change Cipher Spec
6. clent -> server Client Finished (Enc.)
7. clent <-> server Data (Enc.)

ref.

• Breaking Down the TLS Handshake
• Transport Layer Security and HTTPS (CSS322, L25, Y14)
• HTTPS and SSL (CSS322, L26, Y14)
• TLS/SSL Protocol and Handshake Process