Just the Cryptography You Need to Know for TLS
summary
Explains TLS 1.3 mechanics: client sends a public key share in ClientHello so the handshake is one RTT, they perform ECDHE using X25519 / 256-bit to get forward secrecy, then derive separate handshake and application keys via extract/expand KDFs, and use AEAD ciphers like ChaCha20-Poly1305 or AES-256-GCM (transcript lists ~17 cipher suites, server picks one, example uses SHA-384 for HKDF-like derivation). Covers certificate chains, mutual TLS, and how signatures prove possession.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 2:51Symmetric vs asymmetric keys
- 4:57Authentication and certificates
- 6:24TLS 1.3 handshake
- 8:12Cipher suites and key exchange
- 10:59Key derivation and encryption
- 12:02Certificate verification
- 13:48Summary
related talks
45mUnlocking The Secrets Of TLS
52mWhat's New in TLS 1.3
42mCryptography, hashing, encryption without the math
39mSSL/TLS For Mere Mortals
19mWhat's happening in TLS (transport layer security)?
55mUnlocking The Secrets Of TLS
22mTLS 1.3: what developers should know about the API
15mCryptography 101: What Every Swift Developer Should Understand