2026-09-19T05:18:59Zhttps://dspace.mit.edu/server/oai/request

oai:dspace.mit.edu:1721.1/613012022-01-13T07:54:29Zcom_1721.1_7582com_1721.1_7581col_1721.1_131023

Roger Khazan and Joe Cooley. McVeety, Sam Massachusetts Institute of Technology. Dept. of Electrical Engineering and Computer Science. Massachusetts Institute of Technology. Department of Electrical Engineering and Computer Science 2011-02-23T15:01:23Z 2011-02-23T15:01:23Z 2009 2009 http://hdl.handle.net/1721.1/61301 702656427 Thesis (M. Eng.)--Massachusetts Institute of Technology, Dept. of Electrical Engineering and Computer Science, 2009. Cataloged from PDF version of thesis. Includes bibliographical references (p. 65-66). Transport Layer Security (TLS) is a secure communication protocol that is used in many secure electronic applications. In order to establish a TLS connection, a client and server engage in a handshake, which usually involves the transmission of digital certificates. In this thesis we develop a practical speedup of TLS handshakes over bandwidth-constrained, high-latency (i.e. disadvantaged) links by reducing the communication overhead associated with the transmission of digital certificates. This speedup is achieved by deploying two specialized TLS proxies across such links. Working in tandem, one proxy will replace certificate data in packets being sent across the disadvantaged link with a short reference, while the proxy on the other side of the link will restore the certificate data in the packet. The certificate data will be supplied by local or remote caches. Our solution preserves the end-to-end security of TLS and is designed to be transparent to third-party applications, and will thus facilitate rapid deployment by removing the need to modify existing installations of TLS clients and TLS servers. Testing shows that this technique can reduce the overall bandwidth used during a handshake by over 50%, and can reduce the time required to establish a secure channel by over 40% across Iridium links. by Sam McVeety. M.Eng. 75 p. eng Massachusetts Institute of Technology M.I.T. theses are protected by copyright. They may be viewed from this source for any purpose, but reproduction or distribution in any format is prohibited without written permission. See provided URL for inquiries about permission. http://dspace.mit.edu/handle/1721.1/7582 Electrical Engineering and Computer Science. Secure channel establishment in disadvantaged networks : TLS optimization using intercepting proxies Thesis application/pdf Publication unknown unknown <Publication xmlns="https://www.openaire.eu/cerif-profile/1.1/" id="7b519374-5f0d-4dac-9796-2115877f1d5f"> <Type xmlns="https://www.openaire.eu/cerif-profile/vocab/COAR_Publication_Types">http://purl.org/coar/resource_type/c_1843</Type> <Language>eng</Language> <Title>Secure channel establishment in disadvantaged networks : TLS optimization using intercepting proxies</Title> <PublishedIn> <Publication> </Publication> </PublishedIn> <PublicationDate>2009</PublicationDate> <Authors> <Author> <DisplayName>McVeety, Sam</DisplayName> <Affiliation> <OrgUnit> </OrgUnit> </Affiliation> </Author> </Authors> <Editors> </Editors> <Publishers> <Publisher> <DisplayName>Massachusetts Institute of Technology</DisplayName> <OrgUnit /> </Publisher> </Publishers> <License>http://dspace.mit.edu/handle/1721.1/7582</License> <Keyword>Electrical Engineering and Computer Science.</Keyword> <Abstract>Transport Layer Security (TLS) is a secure communication protocol that is used in many secure electronic applications. In order to establish a TLS connection, a client and server engage in a handshake, which usually involves the transmission of digital certificates. In this thesis we develop a practical speedup of TLS handshakes over bandwidth-constrained, high-latency (i.e. disadvantaged) links by reducing the communication overhead associated with the transmission of digital certificates. This speedup is achieved by deploying two specialized TLS proxies across such links. Working in tandem, one proxy will replace certificate data in packets being sent across the disadvantaged link with a short reference, while the proxy on the other side of the link will restore the certificate data in the packet. The certificate data will be supplied by local or remote caches. Our solution preserves the end-to-end security of TLS and is designed to be transparent to third-party applications, and will thus facilitate rapid deployment by removing the need to modify existing installations of TLS clients and TLS servers. Testing shows that this technique can reduce the overall bandwidth used during a handshake by over 50%, and can reduce the time required to establish a secure channel by over 40% across Iridium links.</Abstract> <Access xmlns="http://purl.org/coar/access_right" > </Access> </Publication>