SSL/TLS Security and Implementation

  1. Cipher Suite Architecture
    1. Cipher Suite Components
      1. Key Exchange Algorithms
        1. RSA Key Transport
          1. Diffie-Hellman Key Agreement
            1. Elliptic Curve Diffie-Hellman
              1. Pre-Shared Key Methods
              2. Authentication Methods
                1. RSA Signatures
                  1. DSA Signatures
                    1. ECDSA Signatures
                      1. Anonymous Authentication
                      2. Symmetric Encryption Algorithms
                        1. AES Block Cipher
                          1. ChaCha20 Stream Cipher
                            1. Legacy Ciphers
                            2. Message Authentication Codes
                              1. HMAC Functions
                                1. Authenticated Encryption with Associated Data
                                  1. Poly1305 Authenticator
                                2. Cipher Suite Negotiation
                                  1. Client Preference Lists
                                    1. Cipher Suite Ordering
                                      1. Security Priorities
                                      2. Server Selection Process
                                        1. Security Policy Enforcement
                                          1. Performance Considerations
                                          2. Fallback Mechanisms
                                            1. Protocol Downgrade Prevention
                                              1. Cipher Suite Downgrade Prevention
                                            2. Security Classification
                                              1. Strong Cipher Suites
                                                1. Modern Algorithms
                                                  1. Adequate Key Lengths
                                                    1. Forward Secrecy Support
                                                    2. Weak Cipher Suites
                                                      1. Deprecated Algorithms
                                                        1. Insufficient Key Lengths
                                                          1. Known Vulnerabilities
                                                          2. Cipher Suite Recommendations
                                                            1. Industry Standards
                                                              1. Compliance Requirements
                                                                1. Security Guidelines

                                                            Previous

                                                            4. TLS Handshake Protocol

                                                            Go to top

                                                            Next

                                                            6. Server Implementation