Главная
Study mode:
on
1
Intro
2
nccgroup
3
Security Properties We Want
4
Ciphersuite Choices
5
GCM Mode
6
TLS 1.3 Nonces
7
TLS 1.3 Ciphersuites
8
Key Exchange Modes?
9
TLS 1.2 DHE
10
TLS 1.3 Handshake
11
TLS 1.3 Resumption
12
Key Schedule: Resumption
13
Resumption Takeaways
14
Key Schedule: ORTT
15
Forward Secrecy
16
ORTT Takeaways
17
Summing It Up
18
Questions?
Description:
Explore the latest developments in TLS 1.3 in this 52-minute conference talk from APPSEC Cali 2018. Delve into notable attacks against previous TLS versions and their relevance to TLS 1.3, highlighting key security-related design decisions that mitigate these threats. Learn about new protocol handshakes, including 0-RTT resumption, and gain insights into potential deployment pitfalls and how to avoid them. Presented by Alex Balducci, a Principal Security Consultant at NCC Group's Cryptography Services, this talk covers topics such as ciphersuite choices, GCM mode, TLS 1.3 nonces, key exchange modes, handshake processes, resumption mechanisms, and forward secrecy. Gain valuable knowledge about the evolution of TLS and its implications for application security.

What's New in TLS 1.3

OWASP Foundation
Add to list
0:00 / 0:00