(Logo Tech-invite)  

a Portal devoted to SIP and Security technologies

  (World Map)    
    Search Home Site Map Contact
 SIP/IMS Standardization
> IETF Standardization Process
> RFCs related to SIP (4 p.) o
> SIP-SIPPING-SIMPLE... I-Ds (22 p.) o
> Audio-Video Transport RFCs (2 p.)
> 3GPP Specifications (12 p.)
> OMA Specifications related to SIP
> TISPAN NGN Specifications (3 p.) o
> SIP Topics
> IMS Topics
 SIP/IMS Call Flows
> RFC3261's Example
> Basic -- RFC3665
> SIP PSTN -- RFC3666 (3 p.)
> SIP Service Examples (19 p.)
> IMS Signaling Flows (35 p.)
 SIP/IMS Architecture
> SIP Protocol Structure
> Dialogs & Routing
> UMTS Network Evolution
 Security
> PKIX-TLS-SMIME... Standards (20 p.) o
> Cryptography Basics
> ASN.1 for PKI Certificate & CRL Profile
> ASN.1 for CMS
> RFC3280's Certificate Examples (4)
> RFC4134's CMS-S/MIME Examples (14)
> RFC4474's SIP Authentication Service
> SSL/TLS Time-Diagrams
> IPSec Guides
 ABNF Grammars
> ABNF Notation & Rules
> URI Generic Syntax
> ABNF for SIP
> SIP Messages & URIs
> SIP Header Fields
> MIME Media Types
> ABNF for SDP
> ABNF for MSRP
> ABNF for MRCPv2
> ABNF for RTSP 2.0
> Internet Message Format
 DiffServ CoS Simulation
> IPVCoSS Simulator
> IP-VPN Case Study
  o (daily updated)

SSL/TLS Time Diagrams

Here is a series of slide shows that require a basic knowledge of SSL or TLS. Actually, the protocol that is considered is SSL. These documents mainly highlight the SSL session and connection states during the negotiation phase, as well as the interactions between SSL layers and components. The layered structure of SSL is shown on Figure 1. Colors related to each component are used consistently throughout the documents.

The main case study is followed by two variants related to the first exchanges.

(SSL Stack)

Figure 1: SSL Layer Model 

Top
 
 
>
 
Main Scenario: Client's Certificate and Session Resumption
 
>
 
Variant 1: Generation of a Temporary 512-bit RSA Key
 
>
 
Variant 2: Generation of an Ephemeral Diffie-Hellman Key
 

Main Scenario: Client's Certificate and Session Resumption

This main case study is derived from the following Netscape's traces, prepared to assist developers of SSL implementations, by Nelson Bolyard:

This document provides a detailed description of the sequence of exchanges between an SSL Client and an SSL Server. This main scenario includes the Client's Certificate option, as well as the Session's resumption, and the type of encryption algorithm used is "stream cipher".

(PDF)   SSL Main Scenario -- 2 March 2005, v1.0

(Time-Diagram-1)

Figure 2: Exchanges for Main Scenario 

Top
 
 
>
 
Main Scenario: Client's Certificate and Session Resumption
 
>
 
Variant 1: Generation of a Temporary 512-bit RSA Key
 
>
 
Variant 2: Generation of an Ephemeral Diffie-Hellman Key
 

First Variant: Generation of a Temporary 512-bit RSA Key

This first variant takes into account a US export situation, with constraints concerning the key size. The generation of a temporary 512-bit RSA key is illustrated.

(PDF)   SSL First Variant -- 2 March 2005, v1.0

(Time-Diagram-2)

Figure 3: Exchanges for Variant 1 

Top
 
 
>
 
Main Scenario: Client's Certificate and Session Resumption
 
>
 
Variant 1: Generation of a Temporary 512-bit RSA Key
 
>
 
Variant 2: Generation of an Ephemeral Diffie-Hellman Key
 

Second Variant: Generation of an Ephemeral Diffie-Hellman Key

This second variant shows the generation of an ephemeral Diffie-Hellman key for ensuring the perfect forward secrecy (PFS) service.

(PDF)   SSL Second Variant -- 2 March 2005, v1.0

(Time-Diagram-3)

Figure 4: Exchanges for Variant 2 

  
Last update: May 25, 2007 
  
(to top) © 2005-2008 Joël Repiquet, All Rights Reserved.