The University (U) has developed a new protocol, called UAPP, that is used by a client application on computers in its different branches around the world to send students information to a central server in the U campus in Kuwait. The TCP/IP stack is used by the protocol. Based on your strong knowledge of OpenSSL libraries, you have been hired by the U to pertest and configure the client/server applications so that all sessions between client/servers are became secure. After securing the application, a secure session and connection has been established. The following information is stored by the client computer for this session/connection: Session ID: id Compression method: null Cipher Suite: TLS DHE RSA WITH AES 128 CBC SHA Master secret: s Server random: Client random: Server MAC secret: Client MAC secret: Server encrypt key: Client encrypt key: The following figure shows the general operation of SSL record protocol: Draw a protocol stack of a computer using Ethernet physical and data link layers, that illustrates the protocols in use by the secure client application. What algorithm/cipher is used for the client the authenticate the server? To generate the master secret s, a premaster secret is used. What algorithm is used for the client and server to share a premaster secret. The master secret s is used, in combination with the random values, identities of the client/server and hash functions, to create multiple keys. Explain a security advantage of having multiple secrets/keys. Write an equation that expresses the SSL record operation on a single fragment, F from the client application that produces the packet to be sent P. Use the variables above and || for the concatenate/append operator. For function names you must use the algorithm names (i.e. you cannot use E () for encrypt, H() for hash; refer to specific algorithms). Denote the SSL header as SSL.
The University (U) has developed a new protocol, called UAPP, that is used by a client application on computers in its different branches around the world to send students information to a central server in the U campus in Kuwait. The TCP/IP stack is used by the protocol. Based on your strong knowledge of OpenSSL libraries, you have been hired by the U to pertest and configure the client/server applications so that all sessions between client/servers are became secure. After securing the application, a secure session and connection has been established. The following information is stored by the client computer for this session/connection:
Session ID: id |
Compression method: null |
Cipher Suite: TLS DHE RSA WITH AES 128 CBC SHA |
Master secret: s |
Server random: |
Client random: |
Server MAC secret: |
Client MAC secret: |
Server encrypt key: |
Client encrypt key: |
The following figure shows the general operation of SSL record protocol:
- Draw a protocol stack of a computer using Ethernet physical and data link layers, that illustrates the protocols in use by the secure client application.
- What
algorithm /cipher is used for the client the authenticate the server? - To generate the master secret s, a premaster secret is used. What algorithm is used for the client and server to share a premaster secret.
- The master secret s is used, in combination with the random values, identities of the client/server and hash functions, to create multiple keys. Explain a security advantage of having multiple secrets/keys.
- Write an equation that expresses the SSL record operation on a single fragment, F from the client application that produces the packet to be sent P. Use the variables above and || for the concatenate/append operator. For function names you must use the algorithm names (i.e. you cannot use E () for encrypt, H() for hash; refer to specific algorithms). Denote the SSL header as SSL.
![Application
Data
Fragment
Fragment size at most 214 bytes
Compress
Compression is optional
Add MAC
MAC with shared-key
Encrypt
Encryption with shared-key
Add SSL
Header
SSL Packet](/v2/_next/image?url=https%3A%2F%2Fcontent.bartleby.com%2Fqna-images%2Fquestion%2F77c98b87-bb4b-4eb8-8791-8c098570a7f2%2F7a6afc54-c832-4d33-8e4e-5f56d891bc3a%2Fhx7rswk_processed.png&w=3840&q=75)
![](/static/compass_v2/shared-icons/check-mark.png)
Step by step
Solved in 2 steps
![Blurred answer](/static/compass_v2/solution-images/blurred-answer.jpg)
![Systems Architecture](https://www.bartleby.com/isbn_cover_images/9781305080195/9781305080195_smallCoverImage.gif)
![A+ Guide To It Technical Support](https://www.bartleby.com/isbn_cover_images/9780357108291/9780357108291_smallCoverImage.jpg)
![Systems Architecture](https://www.bartleby.com/isbn_cover_images/9781305080195/9781305080195_smallCoverImage.gif)
![A+ Guide To It Technical Support](https://www.bartleby.com/isbn_cover_images/9780357108291/9780357108291_smallCoverImage.jpg)