Upgrade to Pro — share decks privately, control downloads, hide ads and more …

TLS1.3とは何か?

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest.

 TLS1.3とは何か?

Avatar for Shigeki Ohtsu

Shigeki Ohtsu

April 21, 2016
Tweet

More Decks by Shigeki Ohtsu

Other Decks in Technology

Transcript

  1. ࣗݾ঺հ w גࣜձࣾΠϯλʔωοτΠχγΞςΟϒ **+ ܦӦاըຊ ෦഑৴ࣄۀਪਐ෦ w /PEFKT$PSF5FDIOJDBM$PNNJUUFFϝϯόʔ DSZQUP UMT

    0QFO44-CJOEJOHΛ୲౰͍ͯ͠·͢  w *&5'IUUQCJT8(Ͱ)551ͷ࢓༷ࡦఆʹࢀըɻ 5-4ʹ͸·ͩ௚઀ؔΘ͍ͬͯ·ͤΜɻ w ϒϩάIUUQEIBUFOBOFKQKPWJͰ5-4पΓͷ ωλΛ৭ʑॻ͍͍ͯ·͢ɻ
  2. ಺༰  5-4ͷ؆୯ͳྺ࢙  8FCϓϩτίϧͷਐԽ  5-4͕ٻΊΒΕΔഎܠ  5-4ͱ͸Կ͔ ͕࣌ؒ଍Γͳ͍ͷͰओཁ෦෼ͷΈ

    ຊൃද͸ɺ࣌఺ͷ࠷৽5-4υϥϑτ ESBGU ͱ*&5'ͷٞ࿦ͷ݁ՌΛҰ෦ؚΜ Ͱ͍·͢ɻ࠷ऴ࢓༷ͰมΘΔՄೳੑ͕͋Γ·͢ɻ
  3. 5-4ͷ؆୯ͳྺ࢙ 44- ະൃද ೥ 44- ೥ 44- ೥ *&5'5-48(ελʔτ ೥

    5-4 ೥ 5-4 ೥ 5-4 ೥ 5-4ݕ౼ελʔτ ೥ 5-4࢓༷Խ׬ྃʁ 44-͸چωοτεέʔϓࣾ ͷࢲతϓϩτίϧ େਓͷࣄ৘Ͱ໊শมߋ 44-ͱجຊઃܭ͸େ͖͘ม͑ͣվྑ ༷ʑͳػೳ֦ு ݄຤8(ϥετ ίʔϧ໨ඪ %308/ 100%-& #&"45
  4. 8FCϓϩτίϧͷਐԽ 5$1 5-4 *1 WW &UIFSOFU )551ηϚϯςΟΫε 5$1 *1 WW

    &UIFSOFU 5-4 41%: )551ηϚϯςΟΫε )551 )551͔Β)551΁ ʙ ʙ ϒϥ΢β͸ฏจ ௨৴Λඇαϙʔτ
  5. 8FCϓϩτίϧͷਐԽ 26*$ *1 WW 5$1 6%1 5-4 &UIFSOFU )551ηϚϯςΟΫε )551

    26*$҉߸ϓϩτίϧ ʙ )551ʙ )551͔Β26*$΁ ಠࣗ҉߸ ϓϩτίϧ
  6. 8FCϓϩτίϧͷਐԽ 26*$ *1 WW 5$1 6%1 &UIFSOFU 5-4 )551ηϚϯςΟΫε )551ʙʁ

    ࠓ೔ͷओ୊ 26*$͔Β5-4΁ PSʙ ౷Ұ͞ΕΔ༧ఆ
  7. 5-4͕ٻΊΒΕΔഎܠ  Πϯλʔωοτ؀ڥͷมԽ w εϊʔσϯࣄ݅ɺ-BWBCJUαʔϏεఀࢭ w ৽ϓϩτίϧ )551 26*$ 

    w ͦͷଞ ར༻؀ڥͷมԽɺαʔϏεͷଟ༷Խ   5-4ͷݶք w ༷ʑͳٕज़ෛ࠴ͷ஝ੵ ৗ࣌5-4
  8. Πϯλʔωοτ؀ڥͷมԽ w ओཁϒϥ΢βʔ͸5-4௨৴ͷΈ)551Λαϙʔτ w )551 3'$ Ͱ͸ɺ5-4ͷར༻҉߸Λݫ੍͘͠ ݶɻछྨͷ҉߸ํࣜΛϒϥοΫϦετͱͯ͠ܝࡌ͠ ͯར༻ෆՄɻ w

    ͦͷ੍ݶͷଟ͘͸ɺ5-4Λલ౗͠ͰదԠ ৽ϓϩτίϧ )551 OHJOYͷσϑΥϧτ҉߸ํࣜΛ࢖͏ ͱ)551઀ଓ͸ΤϥʔʹͳΓ·͢ɻ
  9. Πϯλʔωοτ؀ڥͷมԽ w (PPHMF͕ಠࣗʹ։ൃ͍ͯ͠Δϓϩτίϧ w 6%1্Ͱ5$1 5-4૬౰ ЋͷػೳΛ࣮ݱ w 355ʹΑΔߴ଎઀ଓ (PPHMFͰׂ߹

     w (PPHMFͷશαʔϏεͰӡ༻த w 'BDFCPPL͸ϞόΠϧΞϓϦͰ5$1্ͷ26*$҉ ߸Λࢼݧத w -*/&΋26*$ར༻Λࢼݧத ৽ϓϩτίϧ 26*$
  10. ΋͏ϝδϟʔόʔδϣϯΞοϓͱಉ͡վม 5-4ͷओͳഇࢭ߲໨ ػೳ $PNQSFTTJPO $3*.&5*.&ରࡦ 3FOFHPUJBUJPO 1PTU)BOETIBLFʹஔ͖׵͑ 4FTTJPO*% 5JDLFU 14,ʹஔ͖׵͑

    ҉߸ํࣜ .% 4)" 4)" ةຆԽɺ௿ڧ౓ରࡦ %4" ར༻༻్ͷݮগ OPO"&"% $#$ 3$ ةຆԽɺ߈ܸϦεΫͷ௿ݮ *7ϑΟʔϧυ OPODF࠶ར༻ϦεΫͷഉআ DVTUPN%)& $SPTT1SPUPDPM߈ܸରࡦ &$%)&DPNQSFTTGPSNBU ར༻༻్ͷݟ௚͠ɺ؆ૉԽ BOPOZNPVT%) 3'$ SBXQVCLFZ Λ୅༻
  11. ΋͏ϝδϟʔόʔδϣϯΞοϓͱಉ͡վม 5-4ͷओͳഇࢭ߲໨ ϋϯυγ ΣΠΫ SFDPSEMBZFSͷόʔδϣϯ ޙํޓ׵ͷͨΊ͚ͩʹҡ࣋ SBOEPNதͷ࣌ࠁσʔλ ཚ਺ੜ੒͕ߴ౓Խ͠ҙຯ͕ͳ͘ͳͬͨ 1'414,Ҏ֎ͷ伴ަ׵ ൿີ伴ͷةຆԽରࡦ

    44-ͷαϙʔτ ةຆԽͨ͠ϓϩτίϧͷαϙʔτഇࢭ $IBOHF$JQIFS4QFD 伴ަ׵௚ޙʹ҉߸Խ։࢝ 4FSWFS$MJFOU,FZ&YDIBOHF $MJFOU4FSWFS)FMMP֦ுʹҠಈ ֦ுػೳ NBY@GSBHNFOU@MFOHUI ?ʹ࠷େ஋Λݻఆ USVODBUFE@INBD "&"%Ͱͷར༻ෆՄɺ҆શͰ͸ͳ͍
  12. 5-4WT ॳظ઀ଓܗଶͷҧ͍ɺߴ଎Խ ઀ଓ 5-4 5-4 355 /" ࠶઀ଓ14, ʢΫϥΠΞϯτೝূ͸ෆՄ 355

    /" ৽ن઀ଓ αʔόଆൃ৴ 355 ࠶઀ଓ ৽ن઀ଓ 355 ৽ن઀ଓ ҉߸ํࣜͷෆ߹ҙ࣌ ߴ଎Խ ߴ ଎ Խ 355͕ൺֱతେ͖͍ϞόΠϧ؀ڥͷੑೳվળ
  13. 5-4ͷϋϯυγΣΠΫ  355 ClientHello ServerHello EncryptedExtension ServerConfiguration Certificate CertificateVerify Finished

    ApplicationData Finished Application Data Application Data 355 355 355 ҉߸Խൣғ 355 355
  14. 5-4ͷϋϯυγΣΠΫ 355 ClientHello Finished ApplicationData end_of_early_data ServerHello EncryptedExtension ServerConfiguration Certificate

    CertificateVerify Finished ApplicationData 355 355 ҉߸Խൣғ 355 1SF4IBSFE ,FZ 1SF4IBSFE ,FZ 355ͷσʔλ͸3FQMZ߈ܸରࡦͷͨΊσʔλͷႈ౳ੑ͕ඞཁɻ ઐ༻"1*Λ༻ҙͯ͠ΞϓϦଆͰ୲อ͢Δɻ
  15. 5-4ͷ҉߸ํࣜ 伴ަ׵ &$%)& %)& 14, TFDQS Y Y ⒎EIF ೝূ

    34" &$%4" 14, STB@QLDT@TIB FDETB@TFDQS@TIB STB@QTT@TIB FE FE ରশ҉߸ "&"% "&4($. $IB$IB1PMZ "&4$$. ),%' ϋογϡ 4)" 4)"͸·ͩͰ͢ɻ %+#DVSWF Τυϫʔυۂઢ ੺ࣈ͸.5* .VTU5P*NQMFNFOU ϋϯυγΣΠΫॺ ໊͸144ͷΈ
  16. 5-4ϗοτͳٞ࿦ &$ %)&355ͷෆ࠾༻ w TFNJTUBUJDൿີ伴͕ةຆԽͨ͠৔߹ʹ'PSXBSE4FDSFDZ͕ഁΒΕΔ w ٞ࿦ͷ݁Ռɺ &$ %)&CBTFE355͸ෆ࠾༻ʹ w

    14,ͷ3FTVNQUJPO͸ຖճNBTUFSTFDSFUΛߋ৽͢ΔͨΊ355͸14, ϞʔυͷΈར༻Մೳʹ HT T 355҉߸Խσʔλ T HY 355ฏจσʔλ
  17. ࠓޙͷݟࠐΈ w 530/ 5-43FBEZ0S/PU ϫʔΫγϣοϓͰϨϏϡʔ w *&5'#"Ͱϥετίʔϧʹ޲͚֤ͯछ՝୊ͷ൑அ w ຤͙Β͍ʹ࠷ऴ࢓༷υϥϑτެ։ɻ8(ϥετίʔϧ։࢝Λ໨ࢦ͢ɻ w

    'JSFGPY /44 $ISPNF #PSJOH44- $MPVE'MBSFͷϓϩτλΠϓ͕ग़ͯ͘Δɻ.4 "QQMF΋औΓ૊Ή༧ఆɻ0QFO44-͸࣌ظతʹ஗͘ͳΓͦ͏ɻ w ࠶౓530/΍૬ޓ઀ଓࢼݧΛߦ͍ɺ࠷ऴతͳϨϏϡʔͷػձΛઃ͚͍ͨɻ w ͷ*&5'Ͱ-BTU$BMMͷ߹ҙʹ΋͍͚ͬͯͳ͍͔ɻϥετίʔϧظؒ͸௨ ৗΑΓ௕͘ͳΓͦ͏ɻ w ඇৗʹॱௐʹߦ͚͹݄ա͗ʹ5-4ͷ࢓༷Խ׬͔ྃʁ·ͩ·ͩΘ͔Γ·ͤΜɻ ࡁ ࡁ