Simply Introduce SSL

We can easily learn SSL from this page because it reduces some detail process of SSL. We can only focus on the kernel ideas. Therefore the below picture is very simple.

Client want to find a efficient way to encrypt the request to Server. RSA is secure but no efficient. AES is efficient but no secure. The idea is to combine the strength of RSA with security and AES with efficient. The following steps simplify the SSL process.

1. Client randomly generates an AES key, K.
2. Client want to send K in a secure way. It uses RSA to encrypt it with the public key, PubS, of Server.
3. Server uses RSA to decrypt the cipher with the private key, PrvS, of Server to get the key, K. We can make sure that the transformation of K is secure because it is encrypted.
4. Now Client and Server have the same K. They can use K to encrypt request, M1 and response, M2 for communication in a secure way.

-Count