Secure Socket Layer
Presented by:
Abhishek Gupta
2013MSCLIS 33
History
Firstly proposed and used by Netscape also
known for its browser, with a scope of
transmitting sensitive data by encapsulating it
over internet forming a session. It runs on top
of TCP layer
Objectives :
 Authenticate
 Data Integrity
 Data Privacy
Certain websites get access only through SSL
client software
Principle
Idea is to generate an association in between
client and server via getting authentication
then exchanging data and using suitable
algorithm for secrecy of the information
Application layer
SSL
TCP
IP
SSL has 2 layers
Protocol required for connection and during
communication
Record protocol
Record Protocol
 Data Encryption
 Integrity
Encapsulation of data and sending
How ?
By:
 Fragmentation
 MAC
 Compression
 Encryption
 Headers
Step by step
Alert Protocol
Contains two messages :
warning message fatal message
Change cipher spec protocol
contains only single message
can be called as acknowledgment
sending protocol
Handshake protocol
It performs certain functions
Initiates session
Negotiate key sizes
Mutual authentication
Thank You

Secure Socket Layer