『プロフェッショナル SSL/TLS 読書会』 第 6 章

2017 8/18 https://ptls-study.connpass.com/event/62788/
2017 10/6 https://ptls-study.connpass.com/event/66639/

1. 
   ࣮૷ͷ໰୊ ʰϓϩϑΣογϣφϧ44-5-4ʱಡॻձ
   
   
2. !IBTIFEIZQIFO w )BTI
   !IBTIFEIZQIFO
   w 8FC
   EFWFMPQFS
   w +4
   3VCZ
   4DBMB
   3VTU
   4FDVSJUZ
   FUDʜ
   w .P[JMMB
   4FDVSJUZ
   #MPH
   ೔ຊޠ൛
   w 8FC
   TFDVSJUZ
   ؔ࿈ͷ
   .%/
   هࣄ຋༁
   w 44-
   
   ͱಉڃੜ
3. 
   
   ূ໌ॻͷݕূ ʹ͓͚Δෆඋ ݹࠓ౦੢΍ͬͪ·ͬͨू
   ূ໌ॻͷݕূϓϩηεʹόάΛ
   ࢓ࠐΜͰ͠·ͬͨஉͷࢠͷΠϥετ
4. #BTJD
   $POTUSBJOUT
   ͷݕূෆඋ w #BTJD
   $POTUSBJOUT
   
   ͱ͸ʢ෮शʣ
   w \

   
   D"
   #PPMFBO
   %FGBVMU
   'BMTF 

   
   QBUI-FO$POTUSBJOU
   *OUFHFS
   ."9
   0QUJPOBM
 ^
   w D"
   w $"
   ূ໌ॻʢଞͷূ໌ॻΛൃߦՄೳʣͷϑϥά
   w QBUI-FO$POTUSBJOU
   w ഑Լͷதؒ
   $"ʢ㱠ΤϯυΤϯςΟςΟʣͷ࠷େ਺
   w লུ࣌͸Կ΋੍ݶ͠ͳ͍
5. #BTJD
   $POTUSBJOUT
   ͷݕূෆඋ w ྫ
   3PPU
   
   *OUFSNFEJBUF
   
   &OEFOUJUZ
   w ຊདྷߦ͏΂͖ॲཧʢ͓͓·͔ʹʣ
   w &OEFOUJUZ
   ͷ
   $PNNPO
   /BNF
   Λ֬ೝ
   w *OUFSNFEJBUF
   ͷެ։伴Ͱ
   &OEFOUJUZ
   Λݕূ
   w 3PPU
   ͷެ։伴Ͱ
   *OUFSNFEJBUF
   Λݕূ
   w *OUFSNFEJBUF
   ͕
   $"
   ূ໌ॻͰ͋Δ͔ͷ֬ೝ
 Ұൠͷূ໌ॻʹଞͷূ໌ॻΛൃߦͤ͞ͳ͍ͨΊ
6. #BTJD
   $POTUSBJOUT
   ͷݕূෆඋ w *&
   Ͱ
   #BTJD
   $POTUSBJOUT
   ͕ແࢹ͞Ε͍ͯΔ͜ͱΛ .PYJF
   .BSMJOTQJLFʢԾ໊ʣ͕
   
   
   ʹใࠂ
   w .JDSPTPGU
   ͸
   
   
   ʹ৘ใެ։
   w ݪҼ͸
   *&
   ݻ༗Ͱ͸ͳ͘
   $SZQUP
   "1*
   w XFC
   αʔόِ૷ɾϝʔϧॺِ໊૷ɾূ໌ॻϕʔε ͷೝূγεςϜͰͷಛݖঢ֨ɾίʔυॺِ໊૷
   w ౰ॳ
   .JDSPTPGU
   ͸एׯ୙ͯ͠ൃදͨ͠Β͘͠ɺ .PYJF
   ᐌ͘
   l*
   EPO`U
   GFFM
   MJLF
   XBTUJOH
   UJNF
   XJUI
   UIF
   .JDSPTPGU
   13
   EFQBSUNFOUz .PYJF
   
7. ࣭໰ w Q
   ٭஫
   ʮΤϯυΤϯςΟςΟূ໌ॻΛൃߦ ͢Δ
   $"
   ͷূ໌ॻͰ͸ɺηΩϡϦςΟ্ͷཧ༝ʹ ΑΓԼҐ
   $"
   ূ໌ॻΛൃߦͰ͖ͯ͸͍͚·ͤΜɻ ͜ͷಛݖ͕ඞཁʹͳΔͷ͸ɺূ໌ॻνΣʔϯʹ͓͚ Δଞͷ͢΂ͯͷதؒ
   $"
   ূ໌ॻͰ͢ɻʯ
   w ηΩϡϦςΟ্ͷཧ༝ͱ͸ʁ
8. ূ໌ॻνΣʔϯݕূͷܽؕ w .BSUJO
   WPO
   (BHFSO
   ͕
   
   
   ʹใࠂ
   w $7&
   w ໰୊ͱͳͬͨূ໌ॻνΣʔϯ
 <தؒূ໌ॻ><ࡶͳূ໌ॻ>
   <೚ҙͷϧʔτূ໌ॻ>
   w ೚ҙͷϧʔτূ໌ॻ͸ଞͷূ໌ॻͱશ͘ແؔ܎
   w Կނ͔
   HOVUMTDMJ
   ͩͱ
   WBMJE
   ͳνΣʔϯͱͳΔ
   w ड৴ͨ͠νΣʔϯͷதʹϧʔτূ໌ॻ͸௨ৗؚ·Ε ͳ͍ɺͱ͍͏ղऍͷؒҧ͍͕ݪҼ͔ʁ
9. %4"
   
   &$%4"
   ॺ໊ݕূͷ࣮૷ϛε w 0QFO44-
   ͕
   
   
   ʹެ։
   w (PPHMF
   4FDVSJUZ
   5FBN
   ͕ใࠂ
   w %4"
   
   &$%4"
   ͷॺ໊ݕূʹࣦഊͯ͠΋
   JG
   จ͕
   USVF
   ͷέʔεʹͳͬͯ͠·ͬͨ - if (!EVP_VerifyFinal(&md_ctx,p,(int)n,pkey)) + if (EVP_VerifyFinal(&md_ctx,p,(int)n,pkey) <= 0) ͜ͷόάमਖ਼Λػʹ
   if (flag)
   ͳͲͷ׳श͕
   
   ՕॴҎ্मਖ਼͞Εͨ໛༷
10. ؼ͖ͬͯͨ
    #BTJD
    $POTUSBJOUT w 
    
    ʹ
    J04
    
    Ͱಉ༷ͷ੬ऑੑ͕ൃ֮
    w .PYJF
    ͷ͔݅Β໿
    
    ೥ޙ
    w $7&
    w "QQMF
    ͷΫϨδοτʹࡌͬͨͷ͸
    
    ਓ
    w (SFHPS
    ,PQG
    3FDVSJUZ
    -BCT
    w 1BVM
    ,FISFS
    5SVTUXBWF
    4QJEFS-BCT
11. %)&
    
    &$%)&
    ݕূॲཧͷ࣮૷ϛε w 
    
    ʹ
    J04
    
    ͕ṖΞοϓσʔτΛެ։
    w $7&
    w "QQMF
    ᐌ͘ʮ5-4
    ઀ଓͷਅਖ਼ੑݕূʹ͓͚Δόά Λमਖ਼͠·ͨ͠ʯ
    w )BDLFS
    /FXT
    Ͱ࿩୊Λݺͼɺ"QQMF
    ͷ౰֘ιʔε ίʔυ͕εϨουʹషΒΕ͓ͯࡇΓঢ়ଶʹ
12. %)&
    
    &$%)&
    ݕূॲཧͷ࣮૷ϛε … OSStatus err; … if ((err = SSLHashSHA1.update(/**/)) != 0) goto fail; goto fail; if ((err = SSLHashSHA1.final(/**/)) != 0) … fail: … return err;
13. %)&
    
    &$%)&
    ݕূॲཧͷ࣮૷ϛε w 4FSWFS,FZ&YDIBOHF
    ͷॲཧʹ͓͚Δܽؕ
    w ్த·Ͱॲཧ͕੒ޭ͢Ε͹ແ৚݅ʹ
    QBTT
    ͢Δ
    w ௨শ
    lHPUP
    GBJM
    CVHz
    ͱݺ͹ΕΔΑ͏ʹ
    w HDD
    ΍
    DMBOH
    ͷ
    8BMM
    Ͱ͸
    EFBE
    DPEF
    ͷܯࠂ͕ ग़ͳ͍Β͍͠ʜ
    w (OV5-4
    ʹ͓͚Δಉ༷ͷόά΋ޙ೔໌Β͔ʹ
14. ূ໌ॻνΣʔϯݕূͷ࣮૷ϛε w 
    ೥ॳ಄ʹ
    (OV5-4
    ͕ެද
    w $7&
    w 9
    όʔδϣϯ
    
    ͷূ໌ॻ͸
    WBMJE
    ͳதؒ
    $"
    ূ໌ॻͱͯ͠ѻΘΕͯ͠·͏
    w όʔδϣϯ
    
    ͷ
    WBMJE
    ͳূ໌ॻΛ࢖ͬͯ೚ҙͷυϝ Πϯʹର͢Δূ໌ॻΛൃߦͰ͖Δ
15. HPUP
    จͷ൵ܶ࠶ͼ w 
    ೥ॳ಄ʹ
    (OV5-4
    ͕ެද
    w $7&
    w ్தͷॲཧʹࣦഊͨ͠ࡍɺ໭Γ஋Λࣦഊ஋ʹηοτ ͠ͳ͍··
    HPUP
    DMFBOVQ
    w ྫ͑͹ॺ໊ͷ௕͕͞
    
    CJU
    ͰׂΓ੾Εͳ͔ͬͨ৔߹ ʢͦ΋ͦ΋
    #JU
    4USJOH
    ͳͷͰԾఆ΋ؒҧ͍ʣ
    w ్தͷॲཧͰҙਤతʹࣦഊͤ͞ɺҎ߱ͷݕূॲཧΛ ᷖճͰ͖Δ
16. $IBOHF$ZQIFS4QFD
    *OKFDUJPO w 0QFO44-
    ͕
    
    
    ʹύονΛެ։
    w $7&
    w ൃݟऀ͸
    -FQJEVN
    ͷ٠஑ਖ਼࢙͞Μ
    w 0QFO44-
    ͸
    4FSWFS)FMMP%POF
    Λड͚औͬͨ࣌఺ Ͱ҉߸͕ར༻Մೳͩͱݟͳͯ͠͠·͏
    w 4FSWFS)FMMP%POF
    ͷ௚ޙʹ
    $IBOHF$ZQIFS4QFD
    $$4
    Λड৴͢Δͱۭͷ
    NBTUFS
    TFDSFU
    ͕ੜ੒
    w 
    ճ໨ʹਖ਼͍͠
    $$4
    Λड৴ͨ͠ࡍʹ͸طଘͷ
    NBTUFS
    TFDSFU
    ͕ૹ৴͞Εͯ͠·͏
17. ୅ସνΣʔϯূ໌ॻِ଄ w 0QFO44-
    ͕
    
    
    ʹύονΛެ։
    w $7&
    w ใࠂऀ͸
    "EBN
    -BOHMFZ
    
    %BWJE
    #FOKBNJO
    (PPHMF
    
    #PSJOH44-
    w Ϋϩεϧʔτͷূ໌ॻνΣʔϯͱͯ͠ݕূ͢Δࡍɺ ݩʑͷνΣʔϯʹ
    USVTUFE
    ͳূ໌ॻؚ͕·Ε͍ͯ Δͱɺ$"
    ϑϥάΛݕূ͢Δதؒূ໌ॻͷ਺Λݟ ޡͬͯ͠·͏όά
    w ؂༁ऀେ௡͞Μͷϒϩά
    IUUQEIBUFOBOFKQ KPWJ
    Ͱղઆ
18. ΞϓϦέʔγϣϯͷݕূʹ͓͚Δܽؕ w ௿Ϩϕϧͷ
    "1*
    ͔͠ఏڙ͞Ε͍ͯͳ͍ϥΠϒϥϦ Λ࢖༻͢ΔͱόάΛࠞೖ͠΍͍͢
    w ͪΌΜͱͨ͠ϥΠϒϥϦΛ࢖͍·͠ΐ͏
    w ։ൃ؀ڥͰΦϨΦϨূ໌ॻΛ࢖༻͍ͯ͠ΔͨΊʹূ ໌ॻͷݕূػೳΛΦϑʹ͍ͯ͠·ͤΜ͔ʁ
    w εςʔδϯά؀ڥ΍ຊ൪؀ڥͰݕূॲཧΛΦϯʹ͠ ͍ͯ·͔͢ʁ
19. ϗετ໊ͷݕূʹ͓͚Δ໰୊ w %BO
    ,BNJOTLZ
    ͱ
    .PYJF
    .BSMJOTQJLF
    ͕
    #MBDL
    )BU
    64"
    
    Ͱผʑʹൃද
    w $43
    ͷ
    $PNNPO
    /BNF
    ʹ
    OVMM
    จࣈ
    a
    ΛڬΉ
    w WJDUJNDPNaNBMDJPVTDPN
    w "4/
    Ͱॲཧ͢Δ
    $"
    ͸͜ͷจࣈྻશମΛධՁ͠ɺ ຤ඌͷ
    NBMDJPVTDPN
    Λݕূͯ͠ൃߦ
    w ͜ͷূ໌ॻΛड͚औͬͨΫϥΠΞϯτ͕ʢྫ͑͹ʣ ௨ৗͷ
    $
    ݴޠͱͯ͠จࣈྻΛॲཧͨ͠৔߹ɺ WJDUJNDPN
    ʹର͢Δ
    WBMJE
    ͳূ໌ॻͱղऍ
    w $SZQUP
    "1*
    (OV5-4
    /44
    ͢΂ܸͯ௜
20. 
    ཚ਺ੜ੒ʹ͓ ͚Δܽؕ ਓੜͷॳظ஋ͱ͍͏ཚ਺ͷ ੜ੒աఔʹ͕ܽؕ͋ͬͨΒ ܽؕͷ͋Δཚ਺ΞϧΰϦζϜΛ
    ࢖༻ͯ͠͠·ͬͨஉͷࢠͷΠϥετ
21. /FUTDBQF
    /BWJHBUPS
    ͷܽؕ
    3/( w 
    ೥
    w 
    ϒʔτ͔Βͷܦա࣌ؒʢϚΠΫϩඵʣ
    w 
    ࣗ਎ͷϓϩηε
    *%
    w 
    ਌ͷϓϩηε
    *%
    w ߈ܸର৅ͱಉ͡
    6OJY
    ϚγϯʹΞΫηεͰ͖ΔͳΒ
    
    ͱ
    
    ͸ط஌
    w ϚΠΫϩඵ
    
    ?
    㲈
    ?
    CJU
    ͷηΩϡϦςΟ
22. ૊ΈࠐΈσόΠεͱཚ਺ w σϑΥϧτͷ伴͕࢖༻͞Ε͍ͯΔ
    w ىಈؒ΋ͳ͘ੜ੒͞Εͨ伴Λ༻͍ͨͨΊʹΤϯτϩ ϐʔ͕௿͍··
    w 34"
    伴ͷଟ͘Ͱ๏ʢϞδϡϩʣͱͳΔ
    
    ͭͷૉ਺ ͷ͏ͪ
    
    ͕ͭಉ͡஋Ͱ͋Γɺ伴ͷةຆԽΛট͘ঢ় ଶʹ͋ͬͨ
    
    
23. 
    )FBSU#MFFE 0QFO44-
    Ψνϟ ݩ૆ʁηΩϡϦςΟΤϞΞΠίϯ
24. 0QFO44-
    GPSL
    ͱ
    )FBSU#MFFE w )FBSU#MFFE
    ͷൃ֮ʹ൐ͬͯ
    0QFO44-
    ͷࢿۚ೉ ΍ίʔυͷ௿඼࣭ͳͲ͕໌ΔΈʹ
    w 0QFO#4%
    ϓϩδΣΫτ͕
    -JCSF44-
    ͱͯ͠
    GPSL
    w -JCSF44-
    ͸
    )551
    
    αʔόͷ
    IP
    ʹಉࠝ
    w (PPHMF
    ͕
    #PSJOH44-
    ͱͯ͠
    GPSL
    
    w ֤
    GPSL
    ϓϩδΣΫτͷݱঢ়͸ʜʁ
25. ۩ମతͳ࣮૷ϛε಺༰ … n2s(p, payload); // ௕͞ payload ͷಡΈऔΓ … … // snip. 33 lines … memcpy(bp, pl, payload); …
26. )FBSU#MFFE
    ʹର͢Δద੾ͳ؇࿨ࡦ w ύονΛ౰ͯΔ
    w αʔόͷൿີ伴ΛೖΕସ͑ɺ৽͍͠ূ໌ॻΛऔಘ͠ɺ ݹ͍ূ໌ॻΛࣦޮͤ͞Δ
    w ηογϣϯνέοτ伴ΛೖΕସ͑
    w Ϣʔβ΁ύεϫʔυมߋґཔʢέʔεόΠέʔεʣ
    w %#
    ʹΞΫηε͢ΔΞϓϦέʔγϣϯαʔόͱ
    5-4
    αʔό͕ಉډ͍ͯͨ͠৔߹ɺ%#
    ͷύεϫʔυ΋ม ߋ͓ͯ͘͠
27. 
    '3&", ࠓ·ͰͣͬͱʮϑϨʔΫʯͬ ͯಡΜͰͨ
28. ੬ऑੑɾ'3&",
    ߈ܸ֓આ w 
    ೥
    
    ݄
    0QFO44-
    ͕
    4FWFSJUZ
    MPX
    Ͱൃද
    w ΫϥΠΞϯτ͕ߴ͍ڧ౓ͷ҉߸εΠʔτΛωΰγΤʔ γϣϯ͠Α͏ͱͯ͠΋ɺΫϥΠΞϯτ͕ऑ͍
    34"
    伴Ͱ
    QSF@NBTUFS@TFDSFU
    Λ҉߸Խͯ͠͠·͏
    w .JDSPTPGU
    3FTFBSDI
    
    *OSJB
    ͷ
    NJ5-4
    QSPKFDU
    ͕͜ͷ੬ऑੑΛར༻ͯ͠
    '3&",
    ߈ܸΛൃ໌ɺ 0QFO44-
    ͸
    4FWFSJUZ
    Λ
    IJHI
    ʹมߋ
    w ऑ͍
    34"
    伴
    
    ݹͷ༌ग़༻҉߸ʹ༝དྷ
29. ༌ग़҉߸ํࣜ֓આ w ถࠃ֎ͷ伴ަ׵ڧ౓
    CJU
    ʹ੍ݶ͞Ε͍ͯͨ࣌୅
    w ถࠃ಺͔ΒͷΞΫηεͱࠃ֎͔ΒͷΞΫηεͱʹ
 Ԡͯ͡伴௕ɾূ໌ॻΛ෼͚ΔͳΜͯ΍ͬͯΒΕͳ͍
    w ࠃ֎͔Β
    $MJFOU)FMMP
    Λड͚ͨࡍ͸ऑ͍
    34"
    伴Λ
 Ұ࣌తʹ࡞੒ɾαʔόͷڧ͍伴Ͱॺ໊͠ɺ 4FSWFS,FZ&YDIBOHF
    ͰΫϥΠΞϯτ΁ฦ৴
    w ΫϥΠΞϯτ͸ੜ੒ͨ͠
    QSF@NBTUFS@TFDSFU
    Λ
 Ұ࣌తͳऑ͍伴Ͱ҉߸Խ
    w ඇ༌ग़҉߸ͷ
    34"
    伴ަ׵Ͱ͸
    4FSWFS,FZ&YDIBOHF
    ͕ൃੜ͠ͳ͍͜ͱʹ஫ҙ
30. '3&",
    ߈ܸ੒ཱ৚݅ w .J5.
    ͕Ͱ͖Δ͜ͱ
    w αʔό͕༌ग़҉߸ํࣜͷҰ࣌త
    34"
    CJU
    Λ࢖ ༻Ͱ͖Δ͜ͱ
    w αʔόଆͰҰ࣌త
    34"
    ͷ伴ϖΞ͕࢖͍·Θ͞Εͯ ͍Δ͜ͱ
    w ΫϥΠΞϯτ͕༌ग़҉߸Ҏ֎ͷํࣜͰ΋Ұ࣌త
    34"
    CJU
    ͕࢖͑ΔΑ͏֦ு͞Ε͍ͯΔ͜ͱ L
    ΑΓલͷ
    0QFO44-
31. ࣄલʹҼ਺෼ղ
    ͨ͠伴Ͱ෮߸ ڧݻͳ҉߸εΠʔτΛཁ੥ ऑ͍҉߸εΠʔτʹվ᜵ " Ұ࣌త
    34"
    伴
    Λੜ੒ɾૹ৴ ϦΫΤετվ᜵
    ΛӅ͢վ᜵ # ෆਖ਼ϨεϙϯεΛ৴ͯ͡
    QSF@NBTUFS@TFDSFU
    Λ҉߸Խɾૹ৴ ʢຊจʹ͸ͳ͍͕ʣ
    վ᜵
    "
    ΛӅ͢ վ᜵
    #
    ΛӅ͢
32. '3&",
    ߈ܸ w ͪͳΈʹ
    5-4
    
    3'$
    
    ʹ͓͚ΔҰ࣌伴ͷ ߋ৽ස౓͸
    lEBJMZ
    PS
    FWFSZ
    
    USBOTBDUJPOT
    BOE
    NPSF
    PGUFO
    JG
    QPTTJCMFz
    ͱਪ঑
    w '3&",
    ߈ܸͷൃද࣌͸
    &$
    ΠϯελϯεΛ࢖ͬ ͯΘ͔ͣ
    ɾ
    ࣌ؒͰ
    CJU
    ΛҼ਺෼ղ
    w ϨΨγʔίʔυ͸ੵۃతʹຣফ͍ͯ͜͠͏
33. 
    -PHKBN ༌ग़҉߸ͷѱເ࠶ͼ
34. -PHKBN
    w %)&
    伴ަ׵ʹ΋༌ग़҉߸ํࣜ͸͋ͬͨ
    w ͜Ε·ͨ
    
    CJU
    ͳͷͰ
    '3&",
    ͱಉ༷ʹΤΠϠ
    
    w 
    ೥
    
    ݄
    *NQFSGFDU
    'PSXBSE
    4FDSFDZ
    )PX
    %J⒏F)FMMNBO
    'BJMT
    JO
    1SBDUJDF
    w BVUIPS
    
    \%BWJE
    "ESJBO
    BOE
    ,BSUIJLFZBO
    #IBSHBWBO
    BOE
    ;BLJS
    %VSVNFSJD
    BOE
    1JFSSJDL
    (BVESZ
    BOE
    .BUUIFX
    (SFFO
    BOE
    +
    "MFY
    )BMEFSNBO
    BOE
    /BEJB
    )FOJOHFS
    BOE
    %SFX
    4QSJOHBMM
    BOE
    &NNBOVFM
    5IPNa`F
    BOE
    -VLF
    7BMFOUB
    BOE
    #FOKBNJO
    7BOEFS4MPPU
    BOE
    &SJD
    8VTUSPX
    BOE
    4BOUJBHP
    ;BOFMMB#aFHVFMJO
    BOE
    1BVM
    ;JNNFSNBOO^
35. ҉߸εΠʔτީิ ҉߸εΠʔτɾ伴ڧ౓ܾఆ ૉ਺
    Q
    
    ݪ࢝ࠜ
    H
    ൿີ伴
    9
    ެ։伴
    :T
    
    H?9
    NPE
    Q
    ൿີ伴
    8
    ެ։伴
    :D
    
    H?8
    NPE
    Q ;
    
    :T?8
    
    
    
    
    H? 89 ;
    
    :D?9
    
    
    
    
    H? 89 QSF@NBTUFS@TFDSFU
    ;
    ͔Βڞ௨伴Λੜ੒ 3'$
    
    5-4
    
    ͷ
    %)&
    
36. ࣭໰ w 1ʮ-PHKBNͰར༻͞ΕΔͷ͸ɺ%)ύϥϝʔλ ͷαʔόॺ໊͕࠶ૹͰ͖ͯ͠·͏ͱ͍͏ϓϩτίϧ ͷऑ఺
    ʜ
    ϦϓϨΠ߈ܸʹର͢Δอޢ͕ॺ໊ͷઃ ܭʹؚ·Ε͍ͯ·͕͢ɺͦͷͨΊͷ࢓૊Έ͸ΫϥΠ Ξϯτͱαʔόͷཚ਺ʹґଘ
    ʜ
    ΫϥΠΞϯτ͕ ਃ͠ग़ͨཚ਺ͷ஋Λ؍࡯͠ɺผͷϋϯυγΣΠΫͰ ࠶ར༻͢Δ͜ͱ͕ՄೳͳͷͰ͢ʯ digitally-signed struct { opaque client_random[32]; opaque server_random[32]; ServerDHParams params; } signed_params; 3'$
    
    4FD
    
    αʔόॺ໊ͱࢥ͖͠Օॴ
37. ౰೔ͷձ৔Ͱͷ౴͑ w DMJFOU@SBOEPN
    ͸
    $MJFOU)FMMPʢฏจʣʹೖ͍ͬͯ ΔͷͰ෼͔Δ
    w TFSWFS@SBOEPN
    ͸
    4FSWFS)FMMPʢฏจʣʹೖͬͯ ͍ΔͷͰ෼͔Δ
    w ൿີ伴
    9
    Λഁ͓͚ͬͯ͹ɺ%)
    ύϥϝʔλΛվ᜵ ͨ͠όʔδϣϯͷॺ໊Λ࡞Γग़ͤΔ digitally-signed struct { opaque client_random[32]; opaque server_random[32]; ServerDHParams params; } signed_params;
38. ࣄલܭࢉ߈ܸ w ૉ਺
    Q
    
    ݪ࢝ࠜ
    H
    ͸ϓϩτίϧͱͯ͠ط஌
    w Ұ࣌αʔό伴
    9
    :T
    ͸Ωϟογϡ
    Ұ࣌తͱ͸ʜ
    w %)
    伴ަ׵ʹର͢Δ
    /'4
    ߈ܸ͕
    
    ஈ֊ʹ෼͚ΒΕ Δ͜ͱɺલஈͷܭࢉ͸ૉ਺
    Q
    ͷΈʹґଘ͢Δ͜ͱ ͷൃݟ͕
    -PHKBN
    ͷݚڀ੒Ռ
    w 
    CJU
    ͷ伴ʹର͢Δલஈͷܭࢉ͸
    
    िؒ
    w ޙஈͷܭࢉ͸
    
    ඵະຬ
    w Ұ࣌伴ͷΩϟογϡظؒ಺ʹલஈͷܭࢉ͕ऴΘΕ͹ ΫϥΠΞϯτͷλΠϜΞ΢τ
    
    ෼ʹؒʹ߹͏
39. 
    ڧ੍੾அ߈ܸ ࣈ໘ͱҧͬͯͦΕ΄Ͳߴঘͳ ߈ܸ͡Όͳ͍Α
40. ڧ੍੾அ߈ܸ w ຊ౰͸ૹΓ͔ͨͬͨɾཉ͔ͬͨ͠ϨεϙϯεΛ
    5$1
    ϨΠϠʔͰϒϩοΫ͢Δ߈ܸ
    w ઀ଓͷऴྃ࣌ʹ૒ํ͕
    DMPTF@OPUJGZ
    ΛૹΓ߹͍ɺ ਖ਼ৗʹड৴Ͱ͖ͨΒਖ਼ৗͳऴྃͱݟͳ͢ͷ͕ਖ਼ղ
    w ݹͷ࢓༷ͷӨڹͰ࣮૷͕ద౰
    w ͜Ε΋ཱ೿ͳ߈ܸ
    w σʔλ͕͚ܽΔఔ౓Ͱ͠ΐʁ
41. Ԡ༻ɿ$PPLJF
    $VUUFS
    ߈ܸ w ߈ܸର৅ͷ
    XFC
    αΠτͱηογϣϯΛཱ͍֬ͯ͠ ͳ͍ϢʔβΛ୳͢
    w )551
    ϨεϙϯεதͷಈతͳσʔλΛಛఆ͠ɺ5-4
    Ϩίʔυͷ੍ݶ
     
    όΠτΛ࢖ͬͯద౰ʹσʔ λΛಥͬࠐΈɺϨεϙϯεΛ෼ׂͤ͞Δ
    w 4FDVSF
    ϑϥά͕ผϨεϙϯεʹͳΔΑ͏ʹ
    w 
    ͭ໨Ҏ߱ͷϨεϙϯεΛڧ੍੾அ͢Δ
    w 4FDVSF
    ϑϥά͕མͪͨ
    $PPLJF
    Λ͓޷͖ͳํ๏Ͱ ঌ্͕͠Δ
42. Ԡ༻ɿ$PPLJF
    $VUUFS
    ߈ܸ 4FU$PPLJF
    ΑΓ΋લʹ
    ଘࡏ͢Δ͜ͱ͕ඞཁ
43. Ԡ༻ɿ)454
    $VUUFS
    ߈ܸ w )454
    ϔομΛಉ༷ʹΦʔόʔϑϩʔͤ͞
 ڧ੍੾அʹΑͬͯ
    )454
    ػೳΛམͱ͢
    w TUSJDUUSBOTQPSUTFDVSJUZ
    NBYBHF
    JODMVEF4VC%PNBJOT
    w NBYBHF
    ͸༗ޮظؒʢඵʣ
    w JODMVEF4VC%PNBJOT
    ͸αϒυϝΠϯʹؔͯ͠΋
    )5514
    ͷΈڐՄ͢ΔΦϓγϣϯ
    w ϓϩύςΟͷ஋͸࣍ճͷϨεϙϯε࣌ͷ஋Ͱ্ॻ͖ ͞ΕΔ࢓༷ͳͷͰڧ੍੾அ߈ܸ͕ศར
44. 
    σϓϩΠʹ͓͚Δ ໰୊఺ ࣅͯඇͳΔ΋ͷ
    ͪΌΜͱ۠ผ͠Α͏
45. Ծ૝ϗετࠞಉ ಉ͡ূ໌ॻΛڞ༗͍ͯ͠Δ
    ଞͷϗετʹ࢓޲͚ͯ΋
    ҟৗ͕ݕ஌͞Εͳ͍ ূ໌ॻΛڞ༗ ҆શͳϗετ ߈ܸऀͷ੍ޚԼ
46. 5-4
    ηογϣϯΩϟογϡͷڞ༗ ߈ܸର৅ ҆શͳϗετ ಉ͡
    5-4
    ηογϣϯΛ
    ڞ༗͢Δଞͷϗετʹ
    ࢓޲͚ͨࡍʹ
    ূ໌ॻͷ֬ೝΛόΠύε
    Ͱ͖Δ 5-4
    ηογϣϯΛڞ༗ ϗετ͝ͱʹઃఆͰ͖Δ
    ηογϣϯνέοτΛ
    ࢖͍·͠ΐ͏