Click Here to download this article
- Articles
- Authors
- Blogs
- ISA Server Articles
- Links
- Message Boards
- Newsletter
- RSS
- Security Tests
- Services
- Software
- White Papers
Analysis of the SSL 3.0 Protocol
- Published: Apr 04, 2000
- Updated: Apr 04, 2000
- Section: Network Security Library :: Cryptography
- Author:
- Company: Counterpane Internet Security, Inc.
- Printable Version
-
Adjust font size:
- Rating: 3.4/5 - 7 Votes
The SSL protocol is intended to provide a practical, application-layer, widely applicable connection-oriented mechanism for Internet client/server communications security. This note gives a detailed technical analysis of the cryptographic strength of the SSL 3.0 protocol. A number of minor flaws in the protocol and several new active attacks on SSL are presented; however, these can be easily corrected without overhauling the basic structure of the protocol. We conclude that while there are still a few technical wrinkles to iron out, on the whole SSL 3.0 is a valuable contribution towards practical communications security.
Featured Links*
Become a WindowSecurity.com member!
Discuss your security issues with thousands of other network security experts. Click here to join!