TLS会话复用的客户端安全分析与改进措施  

Client Security Analysis for TLS Session Resumption and Improvement Measures

作　　者：代霞[1] 黄劲松 DAI Xia;HUANG Jinsong(NO.30 Institute of CETC,Chengdu Sichuan 610041,China)

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《通信技术》2022年第1期100-105,共6页Communications Technology

摘　　要：为了减少不对称计算带来的性能降低和资源消耗,在传输层安全性协议(TLS)中设计了会话复用机制。该机制使TLS1.2握手过程降为1个往返时延(RTT),并且使TLS1.3实现了0-RTT。基于此,通过研究会话标识(session id)、会话票据(session ticket)和预共享密钥(PSK)3种实现方式,并分析了会话复用在客户端存在的漏洞和缺陷,提出了采用关联数据的认证加密(AEAD)算法和基于密钥相关的哈希运算消息认证码的密钥推导(HKDF)函数导出的密钥对客户端信息进行加密和认证的改进措施,保障了后续在握手和应用数据阶段信息不被窃听和篡改。In order to reduce the performance degradation and resource consumption caused by asymmetric computing, this paper designs a session resumption mechanism in TLS(Transport Layer Security). This mechanism reduces the handshake process of TLS1.2 to 1-RTT, and enables TLS1.3 to implement 0-RTT.The three implementations of session id, session ticket and PSK are described in detail, and the loopholes and defects of session resumption on the client are analyzed. On this basis, the improve, mend measures of encrypting and authenticating the client information by using the AEAD algorithm and the key derived from HKDF are proposed to ensure that the information in the handshake and application data stages will not be eavesdropped and tampered.

关 键 词：传输层安全性协议 会话标识 会话票据 预共享密钥 会话复用 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]