* TLS Handshake Process: During a TLS handshake, various steps occur to establish a secure session between a client (e.g., web browser) and a server.
* ClientHello: The process begins with the client sending a "ClientHello" message, which includes supported cipher suites and the client's random value.
* ServerHello: The server responds with a "ServerHello" message, which includes the selected cipher suite and the server's random value.
* Server Certificate: The server sends its digital certificate to the client to authenticate its identity.
* Client Key Exchange: After verifying the server's certificate, the client generates a random
"PreMasterSecret."
* Encryption with Public Key: The client encrypts the "PreMasterSecret" with the server's public key obtained from the server's certificate. This step ensures that only the server can decrypt the
"PreMasterSecret" since it possesses the corresponding private key.
* Decryption by Server: The server decrypts the received "PreMasterSecret" using its private key.
* Generation of Session Keys: Both the client and the server independently generate session keys using the decrypted "PreMasterSecret," along with the client and server random values.
References:
* "Transport Layer Security (TLS) - Working of TLS", GeeksforGeeks,
https://www.geeksforgeeks.org/transport-layer-security-tls-working-of-tls/
* "How does SSL/TLS work?", Cloudflare, https://www.cloudflare.com/learning/ssl/how-does-ssl-work/