Implementing SSL/TLS

Hands-on, practical guide to implementing SSL and TLS protocols for Internet security

If you are a network professional who knows C programming, this practical book is for you. Focused on how to implement Secure Socket Layer (SSL) and Transport Layer Security (TLS), this book guides you through all necessary steps, whether or not you have a working knowledge of cryptography. The book covers SSLv2, TLS 1.0, and TLS 1.2, including implementations of the relevant cryptographic protocols, secure hashing, certificate parsing, certificate generation, and more.



Shows network professionals how to implement SSL and TLS using cryptography and PKI

Provides specific techniques and strategies, even if you have no prior knowledge of cryptography

Covers HTTP, HTTPS, and HTTP proxy support (including how HTTP proxies interact with SSL); symmetric cryptography, including DES, 3DES, AES and RC4, along with CBC, OFB, COUNTER and AEAD

Delves into public-key cryptography including RSA, Diffie-Hellman key exchange, and Elliptic-curve cryptography

Takes you through digital signature algorithms including RSA, DSA, ECDSA, SHA-1, MD5, and HMAC

Includes additional topics, such as X.509 certificates, ASN.1, and more

Set up and launch a working implementation of SSL with this practical guide.

Introduction.
Chapter 1 Understanding Internet Security.

Chapter 2 Protecting against Eavesdroppers with Symmetric Cryptography.

Chapter 3 Secure Key Exchange over an Insecure Medium with Public Key Cryptography.

Chapter 4 Authenticating Communications Using Digital Signatures.

Chapter 5 Creating a Network of Trust Using X.509 Certificates.

Chapter 6 A Usable, Secure Communications Protocol: Client-Side TLS.

Chapter 7 Adding Server-Side TLS 1.0 Support.

Chapter 8 Advanced SSL Topics.

Chapter 9 Adding TLS 1.2 Support to Your TLS Library.

Chapter 10 Other Applications of SSL.

Appendix A Binary Representation of Integers: A Primer.

Appendix B Installing TCPDump and OpenSSL.

Appendix C Understanding the Pitfalls of SSLv2.

Index.