Which of the following best describes session key creation in SSL?

The correct answer is D. It is created by the client after verifying the server's identity. An SSL session always begins with an exchange of messages called the SSL handshake. The handshake allows the server to authenticate itself to the client using public-key techniques, then allows the client and the server to cooperate in the creation of symmetric keys used for…

Denial of Service and Cryptography

Question

Which of the following best describes session key creation in SSL?

Options

AIt is created by the server after verifying theuser's identity
BIt is created by the server upon connection by the client
CIt is created by the client from the server's public key
DIt is created by the client after verifying the server's identity

How the community answered

(37 responses)

A
3% (1)
B
8% (3)
C
5% (2)
D
84% (31)

Explanation

An SSL session always begins with an exchange of messages called the SSL handshake. The handshake allows the server to authenticate itself to the client using public-key techniques, then allows the client and the server to cooperate in the creation of symmetric keys used for rapid encryption, decryption, and tamper detection during the session that follows. Optionally, the handshake also allows the client to authenticate itself to the server.

Topics

#SSL handshake#session key#TLS#public key encryption

Community Discussion

No community discussion yet for this question.

Full CPEH-001 Practice