Securing the Transport Layer with SSL/TLS: Theory and Practice

This book presents a comprehensive study of transport layer security with a focus on SSL/TLS protocols, addressing both theoretical foundations and practical challenges in securing modern communication systems. It explores the architecture, handshake mechanisms, cryptographic primitives, and operational aspects of SSL/TLS, enabling a clear understanding of secure data transmission.The book analyzes key vulnerabilities and attack vectors, including man-in-the-middle and protocol downgrade attacks, and provides a comparative performance evaluation of SSL/TLS libraries based on throughput, latency, and CPU utilization. It introduces novel security mechanisms, CSP-TPM and CVP-TPM, to enhance protocol robustness, along with the CA1-CA2 framework for detecting attacks in AEAD ciphers.Additionally, improved encryption schemes such as AES-128-GCM-SIV-FK and AES-256-GCM-SIV-FK are proposed. The book also presents SRD-ARC and MRD-ARC architectures for secure cloud databases, addressing TLS overhead in segmented networks. Overall, it offers practical and research-driven solutions for secure communication.