java - SSL use symmetric or asymmetric? -


so far understand:

  1. sender starts handshake server.
  2. server generates pair of public , private key using asymmetric encryption , re-encrypt public key alone using symmetric encryption. , passes public key sender.
  3. sender encrypt message using public key , sends encrypted message server.
  4. server decrypt message using symmetric encryption , decrypt message again using private key.

is right way how ssl encryption works?? please correct me.

sender starts handshake server.

client starts handshake server.

server generates pair of public , private key using asymmetric encryption , re-encrypt public key alone using symmetric encryption.

no.

and passes public key sender.

no. sends certificate client , start secret-key negotiation.

sender encrypt message using public key

no. uses symmetric session key negotiated during handshake.

and sends encrypted message server.

yes.

server decrypt message using symmetric encryption

yes.

and decrypt message again using private key.

no.

is right way how ssl encryption works?

no.


Comments

Popular posts from this blog

database - VFP Grid + SQL server 2008 - grid not showing correctly -

jquery - Set jPicker field to empty value -

.htaccess - htaccess convert request to clean url and add slash at the end of the url -