Implementing SSL/TLS Using Cryptography and PKI

Hands-on, practical guide to implementing SSL and TLS protocols for Internet security

If you are a network professional who knows C programming, this practical book is for you. Focused on how to implement Secure Socket Layer (SSL) and Transport Layer Security (TLS), this book guides you through all necessary steps, whether or not you have a working knowledge of cryptography. The book covers SSLv2, TLS 1.0, and TLS 1.2, including implementations of the relevant cryptographic protocols, secure hashing, certificate parsing, certificate generation, and more.

Coverage includes:
* Understanding Internet Security
* Protecting against Eavesdroppers with Symmetric Cryptography
* Secure Key Exchange over an Insecure Medium with Public Key Cryptography
* Authenticating Communications Using Digital Signatures
* Creating a Network of Trust Using X.509 Certificates
* A Usable, Secure Communications Protocol: Client-Side TLS
* Adding Server-Side TLS 1.0 Support
* Advanced SSL Topics
* Adding TLS 1.2 Support to Your TLS Library
* Other Applications of SSL
* A Binary Representation of Integers: A Primer
* Installing TCPDump and OpenSSL
* Understanding the Pitfalls of SSLv2

Set up and launch a working implementation of SSL with this practical guide.

In the style of Richard Steven's TCP/IP Illustrated, Vol. 2 and Maurice Bach's The Design of the Unix Operating System, this book will present, along with explanatory text, a complete C-language implementation of SSLv2, TLS 1.0 and TLS 1.2, including implementations of the relevant cryptographic protocols, secure hashing, and certificate parsing and generation. Topics covered: HTTP, HTTPS and HTTP proxy support (including how HTTP proxies interact with SSL) Symmetric cryptography, including DES, 3DES, AES and RC4, along with CBC, OFB, COUNTER and AEAD Public-key cryptography including RSA, Diffie-Hellman key exchange and Elliptic-curve cryptography Digital signature algorithms including RSA, DSA, ECDSA, SHA-1, MD5 and HMAC X.509 Certificates and ASN.1 SSLv2, TLS1.0 (client, server, and extensions), and TLS 1.2

Hands-on, practical guide to implementing SSL and TLS protocols for Internet security If you are a network professional who knows C programming, this practical book is for you.  Focused on how to implement Secure Socket Layer (SSL) and Transport Layer Security (TLS), this book guides you through all necessary steps, whether or not you have a working knowledge of cryptography. The book covers SSLv2, TLS 1.0, and TLS 1.2, including implementations of the relevant cryptographic protocols, secure hashing, certificate parsing, certificate generation, and more.  Shows network professionals how to implement SSL and TLS using cryptography and PKI Provides specific techniques and strategies, even if you have no prior knowledge of cryptography Covers HTTP, HTTPS, and HTTP proxy support (including how HTTP proxies interact with SSL); symmetric cryptography, including DES, 3DES, AES and RC4, along with CBC, OFB, COUNTER and AEAD Delves into public-key cryptography including RSA, Diffie-Hellman key exchange, and Elliptic-curve cryptography Takes you through digital signature algorithms including RSA, DSA, ECDSA, SHA-1, MD5, and HMAC Includes additional topics, such as X.509 certificates, ASN.1, and more Set up and launch a working implementation of SSL with this practical guide.