My book suggested the following protocol to replace SSL:

enter image description here

A lot of the terms are familiar to me from the Original SSL, like ChangeCipherSpec message which means from now on the messages I send will be encrypted. and FinishedClient: which is the first message to be encrypted.

But few things aren't clear for me:

  1. Diffie-Hellman is the short term key here, what about the long term?

  2. I know pre shared secret but what is pre master secret, who generates it and what's used for (I don't see the server using it anywhere)?

  3. after stage 5, How are the messages between the client and server passed? what's the encoding function, what's the key?

  • 1
    "My book suggested the following protocol to replace SSL" - You basically ask here to explain something taken out of a book without giving the context of the book. In this case please refer to your book for these question or provide the necessary context - like the book you are talking about and the relevant parts. Also, your title seems to be misleading since you are not asking about SSL but about a different protocol proposed in the book. Jun 19 at 14:53
  • This question is like showing us only the oven temperature section of a recipe, and then asking us how much onion should be added. We have nothing to go on here...
    – schroeder
    Jun 19 at 23:17


Browse other questions tagged or ask your own question.