本文用BR模型对TLS握手协议进行了计算分析与安全性证明. TLS握手协议作为典型的认证密钥交换协议，可以自然结合到BR认证协议计算模型分析框架当中. 本文对该协议主要通信过程进行了总结、建模和分析，证明当协议所采用的公钥加密函数和消息认证函数均满足计算模型安全性要求时，TLS握手协议在BR计算模型下是安全的.

As a typical authentication and key exchange protocol, TLS handshake protocol could be analyzed under the framework of BR computational model. We provide computational analysis of this protocol and prove that, when implemented with pseudorandom function as message authentication algorithm and encryption scheme which satisfies IND-CCA standard, the TLS handshake protocol is indeed secure under computational model. The technicalities of our proof reveal insights regarding the relationship between formal and computational models of security protocol.