The Running-Mode Analysis of SSL310 Basic Handshake Protocol

doi:10.7523/j.issn.2095-6134.2005.4.018

›› 2005, Vol. 22 ›› Issue (4): 511-517.DOI: 10.7523/j.issn.2095-6134.2005.4.018

Previous Articles Next Articles

The Running-Mode Analysis of SSL310 Basic Handshake Protocol

MO Yan^1,2, ZHANG Yu-Qing¹, LI Xue-Gan²

1. National Computer Network Intrusion Protection Center, Graduate School of the Chinese Academy of Sciences, Beijing 100049, China;
2. School of Computer Science and Engineering, Xidian University, Xi’an 710071, China

Received:2004-05-09 Revised:2004-07-26 Online:2005-07-15

Abstract

Abstract:

The simplified SSL310 basic handshake protocol is analyzed by using a formal analysis method called the approach of the running-mode analysis. By analyzing the protocol, we find three different types of attack. Through an in-depth research,we also find that although these three attacks seem to result from the leak of allowing different versions to coexist, they are different. The major difference is the different role imitation, which probably leads to potential attacks. Finally, some improvement is made to avoid these three attacks effectively, which improves the security of the protocol.

Key words: SSL protocol, formal analysis, running-mode analysis

CLC Number:

TP393.08

MO Yan, ZHANG Yu-Qing, LI Xue-Gan. The Running-Mode Analysis of SSL310 Basic Handshake Protocol[J]. , 2005, 22(4): 511-517.

[1]	LIU XiuYing, ZHANG YuQing, YANG Bo, XING Ge. Running-Mode Analysis of the Three-Party Cryptographic Protocol [J]. , 2004, 21(3): 380-385.
[2]	Feng Dengguo, Fan Hong. Survey on Theories and Methods of Formal Analyses for Security Protocols [J]. , 2003, 20(4): 389-406.
[3]	FAN Hong, FENG Deng-Guo. A Mixed Formal Analysis Technology of Security Protocols [J]. , 2002, 19(3): 240-245.
[4]	FAN Hong, FENG DengGuo, GUO JinGeng. Invariant Generation Techniques in Cryptographic Protocol Analysis [J]. , 2002, 19(1): 91-96.
[5]	Dai Ying-xia, Zuo Ying-nan, Xu Jian-zhuo. Security Vulnerabilities and Improvements of the SSL Protocol [J]. , 2000, 17(1): 86-92.

The Running-Mode Analysis of SSL310 Basic Handshake Protocol

PDF (PC)

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 5

Recommended Articles

Metrics

Comments