What is TLS/SSL
-
SSL/TLS are Layer7 protocol for Authentication+Encryption. Layer-4 can have TCP or UDP.
TLS Implementation: NSS, openSSL, gnuTLS, Boring SSL(by Google written in C, C++, Go, assembly), GNUTLS(By GnuTLS project)
Comparisons
SSL vs TLS
| SSL(predecessor of TLS) | TLS | |
|---|---|---|
| Versions | v2,v3 | v1(based on sslv3), v1.2(2008), v1.3(2018 to present): MD5,SHA224 support removed. Handshake messages not encrypted after "Server-hello" |
| Why | Lot of security vulnerabilities were found in SSL | |
| Encryption Algo’s | Stronger wrt SSL | |
| On-Record-Layer | Uses MAC | Uses HMAC |
| Vulnerabilities present | POODLE,DROWN |
NSS(TLS Implementation) vs Openssl
| NSS(Network Security Services) | Openssl | |
|---|---|---|
| Developed By | Mozilla, AOL, Red Hat, Sun, Oracle, Google and others | OpenSSL project |
| Open Source | y | y |
| License | MPL 2.0 | OpenSSL-SSLeay dual-license |
| Recent Version | 3.62 | 1.1.1k |
| Supports PKCS#11(Smart card tokens) | yes | no |