java - SSL use symmetric or asymmetric? -


so far understand:

  1. sender starts handshake server.
  2. server generates pair of public , private key using asymmetric encryption , re-encrypt public key alone using symmetric encryption. , passes public key sender.
  3. sender encrypt message using public key , sends encrypted message server.
  4. server decrypt message using symmetric encryption , decrypt message again using private key.

is right way how ssl encryption works?? please correct me.

sender starts handshake server.

client starts handshake server.

server generates pair of public , private key using asymmetric encryption , re-encrypt public key alone using symmetric encryption.

no.

and passes public key sender.

no. sends certificate client , start secret-key negotiation.

sender encrypt message using public key

no. uses symmetric session key negotiated during handshake.

and sends encrypted message server.

yes.

server decrypt message using symmetric encryption

yes.

and decrypt message again using private key.

no.

is right way how ssl encryption works?

no.


Comments

Popular posts from this blog

.htaccess - htaccess convert request to clean url and add slash at the end of the url -

php - facebook and github login HWIOAuthBundle and FOSUserBundle in Symfony2.1 -

hadoop - Sqoop installation export and import from postgresql -