4

The Illustrated TLS 1.3 Connection

 1 year ago
source link: https://tls13.xargs.org/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.

Every byte explained and reproduced

In this demonstration a client connects to a server, negotiates a TLS 1.3 session, sends "ping", receives "pong", and then terminates the session. Click below to begin exploring.

Client Key Exchange Generation
key6.png
Client Hello
key1.png
Server Key Exchange Generation
key4.png
Server Hello
key2.png
Server Handshake Keys Calc
key9.png
Client Handshake Keys Calc
key8.png
Server Change Cipher Spec
Wrapped Record
key5.png
Server Encrypted Extensions
Wrapped Record
key5.png
Server Certificate
key3.png
Wrapped Record
key5.png
Server Certificate Verify
Wrapped Record
key5.png
Server Handshake Finished
Server Application Keys Calc
key9.png
Client Application Keys Calc
Client Change Cipher Spec
Wrapped Record
Client Handshake Finished
Wrapped Record
Client Application Data
Wrapped Record
Server New Session Ticket 1
Wrapped Record
Server New Session Ticket 2
Wrapped Record
Server Application Data

Note: Updated April 2022 to move from an experimental library to OpenSSL 3.0.1. The original version of this page is archived here.

The code for this project, including packet captures, can be found on GitHub.

If you found this page useful or interesting let me know via Twitter @XargsNotBombs.

[print]


About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK