4. I receive the message and use my private key to decrypt it.
Secure Sockets Layer
A classic implementation of public-key cryptography is with Secure Sockets Layer (SSL) communication.
This is the technology that enables you to securely submit your credit card information to
an online merchant. The elements of an SSL-encrypted session are as follows:
SSL-enabled Web browser (Mozilla, Internet Explorer, Opera, Konquerer, and so on)
SSL-enabled Web server (Apache)
SSL certificate
238
Running the Show Part II
To initiate an SSL session, a Web browser first makes contact with a Web server on port 443, also
known as the HTTPS (Hypertext Transport Protocol Secure) port. After a socket connection has
been established between the two machines, the following occurs:
1. The server sends its SSL certificate to the browser.
2. The browser verifies the identity of the server through the SSL certificate.
3. The browser generates a symmetric encryption key.
4. The browser uses the SSL certificate to encrypt the symmetric encryption key.
5. The browser sends the encrypted key to the server.
6. The server decrypts the symmetric key with its private key counterpart of the public SSL
certificate.
The browser and server can now encrypt and decrypt traffic based on a common knowledge of the
symmetric key.
Pages:
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514