Design and implementation of an SSL component based on CBD

  • Authors:
  • Eun-Ae Cho;Young-Gab Kim;Chang-Joo Moon;Doo-Kwon Baik

  • Affiliations:
  • Software System Lab. Dept. of Computer Science & Engineering, Korea University, Seoul, Korea;Software System Lab. Dept. of Computer Science & Engineering, Korea University, Seoul, Korea;Center for Information Security Technologies(CIST), Korea University, Seoul, Korea;Software System Lab. Dept. of Computer Science & Engineering, Korea University, Seoul, Korea

  • Venue:
  • AsiaSim'04 Proceedings of the Third Asian simulation conference on Systems Modeling and Simulation: theory and applications
  • Year:
  • 2004

Quantified Score

Hi-index 0.01

Visualization

Abstract

SSL is one of the most popular protocols used on the Internet for secure communications. However SSL protocol has several problems. First, SSL protocol brings considerable burden to the CPU utilization so that performance and speed of the security service is lowered during encryption transaction. Second, SSL protocol can be vulnerable for cryptanalysis due to the fixed algorithm being used. Third, it causes a problem of mutual interaction with other protocols because of the encryption export restriction policy of the U.S. Fourth, it is difficult for developers to learn and use cryptography API for SSL. To solve these problems, in this paper, we propose an SSL component based on CBD. The execution of the SSL component is supported by Confidentiality and Integrity component. It can encrypt data selectively and use various mechanisms such as SEED and HAS-160. Also, it can complement the SSL protocol's problems and, at the same time, take advantage of component. Finally, in the performance analysis, we present a better result than the SSL protocol as the data size is increased.