Upgrade to Pro — share decks privately, control downloads, hide ads and more …

TLS1.3とは何か?

 TLS1.3とは何か?

Shigeki Ohtsu

April 21, 2016
Tweet

More Decks by Shigeki Ohtsu

Other Decks in Technology

Transcript

  1. ࣗݾ঺հ w גࣜձࣾΠϯλʔωοτΠχγΞςΟϒ **+ ܦӦاըຊ ෦഑৴ࣄۀਪਐ෦ w /PEFKT$PSF5FDIOJDBM$PNNJUUFFϝϯόʔ DSZQUP UMT

    0QFO44-CJOEJOHΛ୲౰͍ͯ͠·͢  w *&5'IUUQCJT8(Ͱ)551ͷ࢓༷ࡦఆʹࢀըɻ 5-4ʹ͸·ͩ௚઀ؔΘ͍ͬͯ·ͤΜɻ w ϒϩάIUUQEIBUFOBOFKQKPWJͰ5-4पΓͷ ωλΛ৭ʑॻ͍͍ͯ·͢ɻ
  2. ಺༰  5-4ͷ؆୯ͳྺ࢙  8FCϓϩτίϧͷਐԽ  5-4͕ٻΊΒΕΔഎܠ  5-4ͱ͸Կ͔ ͕࣌ؒ଍Γͳ͍ͷͰओཁ෦෼ͷΈ

    ຊൃද͸ɺ࣌఺ͷ࠷৽5-4υϥϑτ ESBGU ͱ*&5'ͷٞ࿦ͷ݁ՌΛҰ෦ؚΜ Ͱ͍·͢ɻ࠷ऴ࢓༷ͰมΘΔՄೳੑ͕͋Γ·͢ɻ
  3. 5-4ͷ؆୯ͳྺ࢙ 44- ະൃද ೥ 44- ೥ 44- ೥ *&5'5-48(ελʔτ ೥

    5-4 ೥ 5-4 ೥ 5-4 ೥ 5-4ݕ౼ελʔτ ೥ 5-4࢓༷Խ׬ྃʁ 44-͸چωοτεέʔϓࣾ ͷࢲతϓϩτίϧ େਓͷࣄ৘Ͱ໊শมߋ 44-ͱجຊઃܭ͸େ͖͘ม͑ͣվྑ ༷ʑͳػೳ֦ு ݄຤8(ϥετ ίʔϧ໨ඪ %308/ 100%-& #&"45
  4. 8FCϓϩτίϧͷਐԽ 5$1 5-4 *1 WW &UIFSOFU )551ηϚϯςΟΫε 5$1 *1 WW

    &UIFSOFU 5-4 41%: )551ηϚϯςΟΫε )551 )551͔Β)551΁ ʙ ʙ ϒϥ΢β͸ฏจ ௨৴Λඇαϙʔτ
  5. 8FCϓϩτίϧͷਐԽ 26*$ *1 WW 5$1 6%1 5-4 &UIFSOFU )551ηϚϯςΟΫε )551

    26*$҉߸ϓϩτίϧ ʙ )551ʙ )551͔Β26*$΁ ಠࣗ҉߸ ϓϩτίϧ
  6. 8FCϓϩτίϧͷਐԽ 26*$ *1 WW 5$1 6%1 &UIFSOFU 5-4 )551ηϚϯςΟΫε )551ʙʁ

    ࠓ೔ͷओ୊ 26*$͔Β5-4΁ PSʙ ౷Ұ͞ΕΔ༧ఆ
  7. 5-4͕ٻΊΒΕΔഎܠ  Πϯλʔωοτ؀ڥͷมԽ w εϊʔσϯࣄ݅ɺ-BWBCJUαʔϏεఀࢭ w ৽ϓϩτίϧ )551 26*$ 

    w ͦͷଞ ར༻؀ڥͷมԽɺαʔϏεͷଟ༷Խ   5-4ͷݶք w ༷ʑͳٕज़ෛ࠴ͷ஝ੵ ৗ࣌5-4
  8. Πϯλʔωοτ؀ڥͷมԽ w ओཁϒϥ΢βʔ͸5-4௨৴ͷΈ)551Λαϙʔτ w )551 3'$ Ͱ͸ɺ5-4ͷར༻҉߸Λݫ੍͘͠ ݶɻछྨͷ҉߸ํࣜΛϒϥοΫϦετͱͯ͠ܝࡌ͠ ͯར༻ෆՄɻ w

    ͦͷ੍ݶͷଟ͘͸ɺ5-4Λલ౗͠ͰదԠ ৽ϓϩτίϧ )551 OHJOYͷσϑΥϧτ҉߸ํࣜΛ࢖͏ ͱ)551઀ଓ͸ΤϥʔʹͳΓ·͢ɻ
  9. Πϯλʔωοτ؀ڥͷมԽ w (PPHMF͕ಠࣗʹ։ൃ͍ͯ͠Δϓϩτίϧ w 6%1্Ͱ5$1 5-4૬౰ ЋͷػೳΛ࣮ݱ w 355ʹΑΔߴ଎઀ଓ (PPHMFͰׂ߹

     w (PPHMFͷશαʔϏεͰӡ༻த w 'BDFCPPL͸ϞόΠϧΞϓϦͰ5$1্ͷ26*$҉ ߸Λࢼݧத w -*/&΋26*$ར༻Λࢼݧத ৽ϓϩτίϧ 26*$
  10. ΋͏ϝδϟʔόʔδϣϯΞοϓͱಉ͡վม 5-4ͷओͳഇࢭ߲໨ ػೳ $PNQSFTTJPO $3*.&5*.&ରࡦ 3FOFHPUJBUJPO 1PTU)BOETIBLFʹஔ͖׵͑ 4FTTJPO*% 5JDLFU 14,ʹஔ͖׵͑

    ҉߸ํࣜ .% 4)" 4)" ةຆԽɺ௿ڧ౓ରࡦ %4" ར༻༻్ͷݮগ OPO"&"% $#$ 3$ ةຆԽɺ߈ܸϦεΫͷ௿ݮ *7ϑΟʔϧυ OPODF࠶ར༻ϦεΫͷഉআ DVTUPN%)& $SPTT1SPUPDPM߈ܸରࡦ &$%)&DPNQSFTTGPSNBU ར༻༻్ͷݟ௚͠ɺ؆ૉԽ BOPOZNPVT%) 3'$ SBXQVCLFZ Λ୅༻
  11. ΋͏ϝδϟʔόʔδϣϯΞοϓͱಉ͡վม 5-4ͷओͳഇࢭ߲໨ ϋϯυγ ΣΠΫ SFDPSEMBZFSͷόʔδϣϯ ޙํޓ׵ͷͨΊ͚ͩʹҡ࣋ SBOEPNதͷ࣌ࠁσʔλ ཚ਺ੜ੒͕ߴ౓Խ͠ҙຯ͕ͳ͘ͳͬͨ 1'414,Ҏ֎ͷ伴ަ׵ ൿີ伴ͷةຆԽରࡦ

    44-ͷαϙʔτ ةຆԽͨ͠ϓϩτίϧͷαϙʔτഇࢭ $IBOHF$JQIFS4QFD 伴ަ׵௚ޙʹ҉߸Խ։࢝ 4FSWFS$MJFOU,FZ&YDIBOHF $MJFOU4FSWFS)FMMP֦ுʹҠಈ ֦ுػೳ NBY@GSBHNFOU@MFOHUI ?ʹ࠷େ஋Λݻఆ USVODBUFE@INBD "&"%Ͱͷར༻ෆՄɺ҆શͰ͸ͳ͍
  12. 5-4WT ॳظ઀ଓܗଶͷҧ͍ɺߴ଎Խ ઀ଓ 5-4 5-4 355 /" ࠶઀ଓ14, ʢΫϥΠΞϯτೝূ͸ෆՄ 355

    /" ৽ن઀ଓ αʔόଆൃ৴ 355 ࠶઀ଓ ৽ن઀ଓ 355 ৽ن઀ଓ ҉߸ํࣜͷෆ߹ҙ࣌ ߴ଎Խ ߴ ଎ Խ 355͕ൺֱతେ͖͍ϞόΠϧ؀ڥͷੑೳվળ
  13. 5-4ͷϋϯυγΣΠΫ  355 ClientHello ServerHello EncryptedExtension ServerConfiguration Certificate CertificateVerify Finished

    ApplicationData Finished Application Data Application Data 355 355 355 ҉߸Խൣғ 355 355
  14. 5-4ͷϋϯυγΣΠΫ 355 ClientHello Finished ApplicationData end_of_early_data ServerHello EncryptedExtension ServerConfiguration Certificate

    CertificateVerify Finished ApplicationData 355 355 ҉߸Խൣғ 355 1SF4IBSFE ,FZ 1SF4IBSFE ,FZ 355ͷσʔλ͸3FQMZ߈ܸରࡦͷͨΊσʔλͷႈ౳ੑ͕ඞཁɻ ઐ༻"1*Λ༻ҙͯ͠ΞϓϦଆͰ୲อ͢Δɻ
  15. 5-4ͷ҉߸ํࣜ 伴ަ׵ &$%)& %)& 14, TFDQS Y Y ⒎EIF ೝূ

    34" &$%4" 14, STB@QLDT@TIB FDETB@TFDQS@TIB STB@QTT@TIB FE FE ରশ҉߸ "&"% "&4($. $IB$IB1PMZ "&4$$. ),%' ϋογϡ 4)" 4)"͸·ͩͰ͢ɻ %+#DVSWF Τυϫʔυۂઢ ੺ࣈ͸.5* .VTU5P*NQMFNFOU ϋϯυγΣΠΫॺ ໊͸144ͷΈ
  16. 5-4ϗοτͳٞ࿦ &$ %)&355ͷෆ࠾༻ w TFNJTUBUJDൿີ伴͕ةຆԽͨ͠৔߹ʹ'PSXBSE4FDSFDZ͕ഁΒΕΔ w ٞ࿦ͷ݁Ռɺ &$ %)&CBTFE355͸ෆ࠾༻ʹ w

    14,ͷ3FTVNQUJPO͸ຖճNBTUFSTFDSFUΛߋ৽͢ΔͨΊ355͸14, ϞʔυͷΈར༻Մೳʹ HT T 355҉߸Խσʔλ T HY 355ฏจσʔλ
  17. ࠓޙͷݟࠐΈ w 530/ 5-43FBEZ0S/PU ϫʔΫγϣοϓͰϨϏϡʔ w *&5'#"Ͱϥετίʔϧʹ޲͚֤ͯछ՝୊ͷ൑அ w ຤͙Β͍ʹ࠷ऴ࢓༷υϥϑτެ։ɻ8(ϥετίʔϧ։࢝Λ໨ࢦ͢ɻ w

    'JSFGPY /44 $ISPNF #PSJOH44- $MPVE'MBSFͷϓϩτλΠϓ͕ग़ͯ͘Δɻ.4 "QQMF΋औΓ૊Ή༧ఆɻ0QFO44-͸࣌ظతʹ஗͘ͳΓͦ͏ɻ w ࠶౓530/΍૬ޓ઀ଓࢼݧΛߦ͍ɺ࠷ऴతͳϨϏϡʔͷػձΛઃ͚͍ͨɻ w ͷ*&5'Ͱ-BTU$BMMͷ߹ҙʹ΋͍͚ͬͯͳ͍͔ɻϥετίʔϧظؒ͸௨ ৗΑΓ௕͘ͳΓͦ͏ɻ w ඇৗʹॱௐʹߦ͚͹݄ա͗ʹ5-4ͷ࢓༷Խ׬͔ྃʁ·ͩ·ͩΘ͔Γ·ͤΜɻ ࡁ ࡁ