This shows you the differences between two versions of the page.
ac:laboratoare:05 [2022/11/03 16:42] marios.choudary |
ac:laboratoare:05 [2022/11/03 17:05] (current) marios.choudary |
||
---|---|---|---|
Line 2: | Line 2: | ||
<hidden> | <hidden> | ||
- | ==== Task 1: Implement DH + AES-GCM encryption === | + | ==== Task 0: Implement DH + AES-GCM encryption === |
Implement DH + AES-GCM encryption starting from the code from previous lab (see bonus 2). | Implement DH + AES-GCM encryption starting from the code from previous lab (see bonus 2). | ||
Line 19: | Line 19: | ||
{{ :ac:laboratoare:chain-of-trust.png?500 |Chain of trust}} | {{ :ac:laboratoare:chain-of-trust.png?500 |Chain of trust}} | ||
- | === Task: Investigate certficates for ocw.cs.pub.ro === | + | === Task 1: Investigate certficates for ocw.cs.pub.ro === |
Using your browser's 'View Certificate' functionality, try to find information about the certificate presented by https://ocw.cs.pub.ro. We are interested in: | Using your browser's 'View Certificate' functionality, try to find information about the certificate presented by https://ocw.cs.pub.ro. We are interested in: | ||
Line 79: | Line 79: | ||
- | === Task 3: Investigate the TLS cryptographic parameters === | + | === Task 2: Investigate the TLS cryptographic parameters === |
Use your browser to inspect the TLS version and cryptoparameters of popular websites: google.com, amazon.com, microsoft.com. Report any differences. | Use your browser to inspect the TLS version and cryptoparameters of popular websites: google.com, amazon.com, microsoft.com. Report any differences. | ||
- | === Task 4: Investigate the TLS handshake protocol === | + | * Can you tell what is the root certificate, the intermediate certificate and the target/server certificate ? |
+ | * How do you differentiate a root certificate from an intermediate certificate ? | ||
+ | |||
+ | === Task 3: Investigate the TLS handshake protocol === | ||
Using Wireshark, investigate the two traffic captures ({{:ac:laboratoare:traffic-captures.tar}}). In both cases try to find: | Using Wireshark, investigate the two traffic captures ({{:ac:laboratoare:traffic-captures.tar}}). In both cases try to find: |