Tehnički Vjesnik (Jan 2025)
Enhancing TLS Handshake Security: A Novel Mutual Cryptographic Scheme
Abstract
The Transport Layer Security (TLS) Handshake Protocol serves as a critical mechanism in the security framework of internet communications, establishing a secure conduit between clients and servers. This protocol, not only ensures the confidentiality and integrity of data transferred over the internet but also facilitates the authentication of communicating parties. In this paper we investigate the transmission process and the message structure of the TLS Handshake protocol, construct a formal representation for the core transmission process. After that, we find the attack trace between client and server, which is caused by the secrecy of transported message. We introduce our enhanced cryptographic scheme, detailing the theoretical foundations, cryptographic mechanisms employed, and the integration process with the TLS protocol. Our approach significantly improves the resilience of client-server communications against potential attacks while maintaining efficiency. Formal verification confirms the enhanced security of our proposed scheme, demonstrating its potential for improving TLS implementations.
Keywords