Lecture 3. Transport Layer Security TLS 1.3 (Applied Cryptography 101: Real-World Deployments)

Video lectures for Alfred Menezes's introductory course on real-world deployments of cryptography. Topics covered: Secure Sockets Layer, SSL, Transport Layer Security, TLS 1.3, handshake protocol, record layer protocol, forward secrecy, Web PKI, certificates, root CAs, intermediate CAs, DigiNotar breach, certificate transparency Lecture playlist: https://www.youtube.com/playlist?list=PLA1qgQLL41SRn_23p8zD0vUpKM4qOgt_T Course web page: https://cryptography101.ca/crypto101-deployments/ The slides are available on the course web page. Other cryptography courses: https://cryptography101.ca Slides 00:00 Introduction 01:04 Slide 38: Transport Layer Security (TLS) 02:32 Slide 39: TLS 1.3 03:41 Slide 40: TLS components 04:02 Slide 41: TLS 1.3 handshake protocol (simplified) 07:16 Slide 42: TLS 1.3 record layer protocol 07:58 Slide 43: RSA key transport or ECDH? 10:13 Slide 44: ECDH and forward secrecy 12:02 Slide 45: Performance 12:39 Slide 46: The TLS PKI 14:09 Slide 47: Example of a TLS certificate: https://bbc.com 15:36 Slide 48: Visiting https://bbc.com 17:14 Slide 49: Visiting https://bbc.com (Handshake 1) 18:16 Slide 50: Visiting https://bbc.com (Handshake 2) 19:37 Slide 51: Visiting https://bbc.com (Handshake 3) 20:06 Slide 52: Secure connection 20:48 Slide 53: GlobalSign 22:08 Slide 54: Can all CAs be trusted? 23:14 Slide 55: DigiNotar 24:42 Slide 56: Other CA breaches 25:53 Slide 57: Dealing with CA breaches