<x:xmpmeta tsc:version="2.0.1" xmlns:x="adobe:ns:meta/" xmlns:tsc="http://www.techsmith.com/xmp/tsc/">
   <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpDM="http://ns.adobe.com/xmp/1.0/DynamicMedia/" xmlns:xmpG="http://ns.adobe.com/xap/1.0/g/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:tscDM="http://www.techsmith.com/xmp/tscDM/" xmlns:tscIQ="http://www.techsmith.com/xmp/tscIQ/" xmlns:tscHS="http://www.techsmith.com/xmp/tscHS/" xmlns:stDim="http://ns.adobe.com/xap/1.0/sType/Dimensions#" xmlns:stFnt="http://ns.adobe.com/xap/1.0/sType/Font#" xmlns:exif="http://ns.adobe.com/exif/1.0" xmlns:dc="http://purl.org/dc/elements/1.1/">
      <rdf:Description dc:date="2017-03-29 11:04:24 PM" dc:source="Camtasia,9.0.3,enu" dc:title="l_17tls1" tscDM:firstFrame="l_17tls1_First_Frame.png" tscDM:originId="2625EA67-814F-4A0C-B4C7-2902396CFF3B" tscDM:project="l_17tls1.tscproj">
         <xmpDM:duration xmpDM:scale="1/1000" xmpDM:value="1111966"/>
         <xmpDM:videoFrameSize stDim:unit="pixel" stDim:h="1080" stDim:w="1440"/>
         <tsc:langName>
            <rdf:Bag>
               <rdf:li xml:lang="en-US">English</rdf:li></rdf:Bag>
         </tsc:langName>
         <xmpDM:Tracks>
            <rdf:Bag>
               <rdf:li>
                  <rdf:Description xmpDM:trackType="ScreenText" xmpDM:frameRate="f1000" xmpDM:trackName="Screen Text">
                     <xmpDM:markers>
                        <rdf:Seq>
                           <rdf:li><rdf:Description xmpDM:name="Transport Level Security Raj Jain Washington University in Saint Louis Saint Louis, MO 63130 Jain@cse.wustl.edu" xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Audio/Video recordings of this lecture are available at: http://www.cse.wustl.edu/~jain/cse571-17/" xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Overview Secure Sockets Layer (SSL) Transport Layer Security (TLS) HTTPS Secure Shell (SSH) These slides are based partly on Lawrie" xmpDM:startTime="22000" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Brown’s slides supplied with William Stallings’s book “Cryptography and Network Security: Principles and Practice,” 7th Ed, 2017." xmpDM:startTime="22000" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="22000" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Web Traffic Security Approaches SSL/TLS provides the following services over TCP layer: Crypto negotiation: Negotiate encryption and hash methods Key" xmpDM:startTime="49133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Exchange: Secret key exchange using public key certificates Privacy: Encryption using a secret key Integrity: Message authentication using a keyed" xmpDM:startTime="49133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="hash" xmpDM:startTime="49133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="History SSL was developed by Netscape." xmpDM:startTime="220200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="V1 was never deployed." xmpDM:startTime="220200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="V2 had major issues." xmpDM:startTime="220200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="SSL v3 is most commonly deployed protocol IETF standardized SSL V3 with some upgrades as Transport Layer Security (TLS) V1" xmpDM:startTime="220200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="in RFC 2246 1999 TLS is encoded as SSL V3.1" xmpDM:startTime="220200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="The differences are small but the protocols do not interoperate." xmpDM:startTime="220200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="TLS v1.1" xmpDM:startTime="220200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="(SSL V3.2)" xmpDM:startTime="220200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="added protection against CBC attacks [RFC 4346 2006] Ref: http://en.wikipedia.org/wiki/Transport_Layer_Security" xmpDM:startTime="220200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="220200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="History (Cont) TLS v1.2" xmpDM:startTime="417667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="(SSL V3.3)" xmpDM:startTime="417667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="in RFC 5246 August 2008 added: MD5-SHA-1 pseudorandom function (PRF) replaced with SHA-256 MD5-SHA-1 Finished message hash replaced with SHA-256" xmpDM:startTime="417667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="MD5-SHA-1 in digitally-signed element replaced with a single hash negotiated during handshake, default=SHA-1." xmpDM:startTime="417667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Enhanced Client's and server's specification for hash and signature algorithms Expansion of support for authenticated encryption ciphers TLS Extensions definition" xmpDM:startTime="417667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="and Advanced Encryption Standard Cipher Suites RFC 6176 updated TLS v1.2" xmpDM:startTime="417667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="by requiring that SSL V2 is never accepted." xmpDM:startTime="417667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Ref: http://en.wikipedia.org/wiki/Transport_Layer_Security#TLS_1.3_.28draft.29" xmpDM:startTime="417667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Must Read" xmpDM:startTime="417667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="SSL Architecture SSL has 4 components in two layers Handshake protocol: Negotiates crypto parameters for an “SSL session” that can" xmpDM:startTime="479500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="be used for many “SSL/TCP connections” Record Protocol: Provides encryption and MAC Alert protocol: To convey problems Change Cipher Spec" xmpDM:startTime="479500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Protocol: Implement negotiated crypto parameters Ch17." xmpDM:startTime="479500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="SSL Protocol Stack.pdf" xmpDM:startTime="479500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="00156198 Mnementh BEAE7A2F:" xmpDM:startTime="479500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="SSL Handshake Protocol Allows server and client to: Authenticate each other To negotiate encryption &amp; MAC algorithms To negotiate cryptographic" xmpDM:startTime="703233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="keys to be used Comprises a series of messages in phases Establish Security Capabilities Server Authentication Client Authentication and Key" xmpDM:startTime="703233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Exchange Finish" xmpDM:startTime="703233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="SSL Architecture SSL has 4 components in two layers Handshake protocol: Negotiates crypto parameters for an “SSL session” that can" xmpDM:startTime="710500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="be used for many “SSL/TCP connections” Record Protocol: Provides encryption and MAC Alert protocol: To convey problems Change Cipher Spec" xmpDM:startTime="710500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Protocol: Implement negotiated crypto parameters Ch17." xmpDM:startTime="710500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="SSL Protocol Stack.pdf" xmpDM:startTime="710500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="00156198 Mnementh BEAE7A2F:" xmpDM:startTime="710500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="SSL Handshake Protocol Allows server and client to: Authenticate each other To negotiate encryption &amp; MAC algorithms To negotiate cryptographic" xmpDM:startTime="711367" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="keys to be used Comprises a series of messages in phases Establish Security Capabilities Server Authentication Client Authentication and Key" xmpDM:startTime="711367" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Exchange Finish" xmpDM:startTime="711367" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="SSL Handshake Protocol Actions Client Hello: Crypto Choices (Protocol Version, Cipher Suite, Compression, RClient Server Hello: Crypto Selected, RServer Certificate:" xmpDM:startTime="722133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Server Certificate (Optional) Certificate Request (Optional) Certificate: Client Certificate Client Key Exchange: E(Kserver Public Key, PreMasterSecret) Change Cipher Spec Handshake" xmpDM:startTime="722133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Finished: Hash and MAC of Previous messages Change Cipher Spec Handshake Finished Client Server Generate random PMS S Compute MS" xmpDM:startTime="722133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="K Compute MS K Server Key Exchange (Optional) Server Hello Done Certificate Verify" xmpDM:startTime="722133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="SSL Handshake Protocol Allows server and client to: Authenticate each other To negotiate encryption &amp; MAC algorithms To negotiate cryptographic" xmpDM:startTime="724033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="keys to be used Comprises a series of messages in phases Establish Security Capabilities Server Authentication Client Authentication and Key" xmpDM:startTime="724033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Exchange Finish" xmpDM:startTime="724033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="SSL Handshake Protocol Actions Client Hello: Crypto Choices (Protocol Version, Cipher Suite, Compression, RClient Server Hello: Crypto Selected, RServer Certificate:" xmpDM:startTime="775400" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Server Certificate (Optional) Certificate Request (Optional) Certificate: Client Certificate Client Key Exchange: E(Kserver Public Key, PreMasterSecret) Change Cipher Spec Handshake" xmpDM:startTime="775400" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Finished: Hash and MAC of Previous messages Change Cipher Spec Handshake Finished Client Server Generate random PMS S Compute MS" xmpDM:startTime="775400" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="K Compute MS K Server Key Exchange (Optional) Server Hello Done Certificate Verify" xmpDM:startTime="775400" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Handshake Messages All messages are Type-Length-Value (TLV) encoded." xmpDM:startTime="1080767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Types 1 = Client Hello: Highest Version Supported, RClient, Session ID, Cipher Suites, Compressions 2 = Server Hello: Version Accepted," xmpDM:startTime="1080767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="RServer, Session ID, Chosen Cipher, Chosen Compression 14 = Server Hello Done 16 = Client Key Exchange: Encrypted pre-master key" xmpDM:startTime="1080767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="12 = Server Key Exchange: Modulus p, Exponent g, Signature (export only) 13 = Certificate Request: CA Names (requested by" xmpDM:startTime="1080767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="the server) 11 = Certificate: sent by the server 15 = Certificate Verify: Signature of Hash of messages 20 =" xmpDM:startTime="1080767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Handshake Finished: MD5 and SHA Digest of message halves" xmpDM:startTime="1080767" xmpDM:duration="1000"/></rdf:li></rdf:Seq>
                     </xmpDM:markers>
                  </rdf:Description>
               </rdf:li>
               <rdf:li>
                  <rdf:Description xmpDM:trackType="TableOfContents" xmpDM:frameRate="f1000" xmpDM:trackName="Table of Contents">
                     <xmpDM:markers>
                        <rdf:Seq>
                           <rdf:li><rdf:Description xmpDM:name="Transport Level Security" xmpDM:startTime="0" tscDM:image="l_17tls1_Thumbnails.png" tscDM:imageindex="0" tscDM:imageoffset="0" tscDM:imagerect="0, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Overview" xmpDM:startTime="22000" tscDM:image="l_17tls1_Thumbnails.png" tscDM:imageindex="1" tscDM:imageoffset="0" tscDM:imagerect="75, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Web Traffic Security Approaches" xmpDM:startTime="49133" tscDM:image="l_17tls1_Thumbnails.png" tscDM:imageindex="2" tscDM:imageoffset="0" tscDM:imagerect="150, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="History" xmpDM:startTime="220200" tscDM:image="l_17tls1_Thumbnails.png" tscDM:imageindex="3" tscDM:imageoffset="0" tscDM:imagerect="225, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="History (Cont)" xmpDM:startTime="417667" tscDM:image="l_17tls1_Thumbnails.png" tscDM:imageindex="4" tscDM:imageoffset="0" tscDM:imagerect="300, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="SSL Architecture" xmpDM:startTime="479500" tscDM:image="l_17tls1_Thumbnails.png" tscDM:imageindex="5" tscDM:imageoffset="0" tscDM:imagerect="375, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="SSL Handshake Protocol" xmpDM:startTime="703233" tscDM:image="l_17tls1_Thumbnails.png" tscDM:imageindex="6" tscDM:imageoffset="0" tscDM:imagerect="450, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="SSL Architecture" xmpDM:startTime="710500" tscDM:image="l_17tls1_Thumbnails.png" tscDM:imageindex="7" tscDM:imageoffset="0" tscDM:imagerect="525, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="SSL Handshake Protocol" xmpDM:startTime="711367" tscDM:image="l_17tls1_Thumbnails.png" tscDM:imageindex="8" tscDM:imageoffset="0" tscDM:imagerect="600, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="SSL Handshake Protocol Actions" xmpDM:startTime="722133" tscDM:image="l_17tls1_Thumbnails.png" tscDM:imageindex="9" tscDM:imageoffset="0" tscDM:imagerect="675, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="SSL Handshake Protocol" xmpDM:startTime="724033" tscDM:image="l_17tls1_Thumbnails.png" tscDM:imageindex="10" tscDM:imageoffset="0" tscDM:imagerect="750, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="SSL Handshake Protocol Actions" xmpDM:startTime="775400" tscDM:image="l_17tls1_Thumbnails.png" tscDM:imageindex="11" tscDM:imageoffset="0" tscDM:imagerect="825, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Handshake Messages" xmpDM:startTime="1080767" tscDM:image="l_17tls1_Thumbnails.png" tscDM:imageindex="12" tscDM:imageoffset="0" tscDM:imagerect="900, 0, 75, 56"/></rdf:li></rdf:Seq>
                     </xmpDM:markers>
                  </rdf:Description>
               </rdf:li>
            </rdf:Bag>
         </xmpDM:Tracks>
         <tscDM:controller>
            <rdf:Description xmpDM:name="tscplayer">
               <tscDM:parameters>
                  <rdf:Bag>
                     <rdf:li xmpDM:name="autohide" xmpDM:value="false"/><rdf:li xmpDM:name="autoplay" xmpDM:value="true"/><rdf:li xmpDM:name="loop" xmpDM:value="false"/><rdf:li xmpDM:name="searchable" xmpDM:value="true"/><rdf:li xmpDM:name="captionsenabled" xmpDM:value="false"/><rdf:li xmpDM:name="sidebarenabled" xmpDM:value="false"/><rdf:li xmpDM:name="unicodeenabled" xmpDM:value="false"/><rdf:li xmpDM:name="backgroundcolor" xmpDM:value="000000"/><rdf:li xmpDM:name="sidebarlocation" xmpDM:value="left"/><rdf:li xmpDM:name="endaction" xmpDM:value="stop"/><rdf:li xmpDM:name="endactionparam" xmpDM:value="true"/><rdf:li xmpDM:name="locale" xmpDM:value="en-US"/></rdf:Bag>
               </tscDM:parameters>
               <tscDM:controllerText>
                  <rdf:Bag>
                  </rdf:Bag>
               </tscDM:controllerText>
            </rdf:Description>
         </tscDM:controller>
         <tscDM:contentList>
            <rdf:Description>
               <tscDM:files>
                  <rdf:Seq>
                     <rdf:li xmpDM:name="0" xmpDM:value="l_17tls1.mp4"/><rdf:li xmpDM:name="1" xmpDM:value="l_17tls1_First_Frame.png"/><rdf:li xmpDM:name="2" xmpDM:value="l_17tls1_Thumbnails.png"/></rdf:Seq>
               </tscDM:files>
            </rdf:Description>
         </tscDM:contentList>
      </rdf:Description>
   </rdf:RDF>
</x:xmpmeta>