Tehnički Vjesnik (Jan 2025)

Enhancing TLS Handshake Security: A Novel Mutual Cryptographic Scheme

  • Yuting Feng

DOI
https://doi.org/10.17559/TV-20240528001688
Journal volume & issue
Vol. 32, no. 4
pp. 1546 – 1554

Abstract

Read online

The Transport Layer Security (TLS) Handshake Protocol serves as a critical mechanism in the security framework of internet communications, establishing a secure conduit between clients and servers. This protocol, not only ensures the confidentiality and integrity of data transferred over the internet but also facilitates the authentication of communicating parties. In this paper we investigate the transmission process and the message structure of the TLS Handshake protocol, construct a formal representation for the core transmission process. After that, we find the attack trace between client and server, which is caused by the secrecy of transported message. We introduce our enhanced cryptographic scheme, detailing the theoretical foundations, cryptographic mechanisms employed, and the integration process with the TLS protocol. Our approach significantly improves the resilience of client-server communications against potential attacks while maintaining efficiency. Formal verification confirms the enhanced security of our proposed scheme, demonstrating its potential for improving TLS implementations.

Keywords