Implementing SSL / Tls Using Cryptography and Pki

Let's get down to a practical implementation of SSL and TLS SSL/TLS is a standardized, widely implemented, peer-reviewed protocol for applying cryptographic primitives to arbitrary networked communications. It provides privacy, integrity, and a measure of authenticity to otherwise inherently untrustworthy network connections. While most books detail the protocol, this one is intended to provide you with a nearly complete SSL/TLS library, developed incrementally using C code. Whether or not you have a working knowledgeof cryptography, you'll find this practical guide helps you understand the internals of these libraries so that, when it comes time to use one, you will have a firm understanding of what takes place at each stage. Understand secure sockets and the HTTP protocol Learn to protect against eavesdroppers with symmetric cryptography Secure key exchanges over an insecure medium with public key cryptography and boost security with elliptic curve cryptography Examine the use of digital signatures and X.509 certificates Develop a usable, secure communications protocol with client-side TLS Add server-side TLS 1.0 support Use SSL in advanced situations, including safely reusing key material with sessionresumption and verifying identity with client authentication Go to www.wiley.com/go/implementingssl to find code and other features related to this book