Analysis and Comparison of Several Algorithms in SSL/TLS Handshake Protocol

摘要

SSL/TLS servers are often overloaded with many simultaneous requests or denial of service (DoS) attack which will result in degradation of performance. So SSL/TLS servers have to utilize significantly more hardware in order to provide a reasonable response time to their customers. Instead of developing the hardware, it is always possible to look for faster algorithms in order to speed up decryption stages for improve SSL/TLS performance. In the paper, we investigate the performance and security of three algorithms in SSL/TLS handshake protocol. The solutions improve the performance without decrease security of the system or requiring expensive hardware. We provide detailed analyses of the three techniques and compare disadvantages of the three techniques. In particular, although increase some bandwidth and memory overhead to client, client-aided RSA provide the best performance among the algorithms in SSL/TLS handshake protocol by transfer some cryptographic computation to client.