SSL/TLS的安全性分析与实现

Analysis and Realization of SSL/TLS Security

首先介绍了保证SSL/TLS协议安全性的主要方面;分析了保护m aster_secret、服务器私钥、随机数生成和证书的认证应该注意的问题;提出了一个安全的SSL/TLS协议通信模型。

The main aspects on SSL/TLS security that should be paid attention to are introduced. The problems of how to protect master - secret and privacy keys, creation of the random number and authentication of certifi- cate are analyzed. A secure model of SSL/TLS is provided to solve these problems.