"Secure Communication Channel Establishment: TLS 1.3 (over TCP Fast Open) vs. QUIC"
As the most popular protocol to establish a secure communication channel over the Internet, the current standard TLS 1.2 over TCP requires 3-round-trip-time (3-RTT) initial and 2-RTT resumption handshakes before sending any encrypted application data. To reduce such latency without sacrificing security, two protocols stand out: TLS 1.3 as a new version of TLS and QUIC as a low-latency transport protocol. In particular, TLS 1.3 over TCP Fast Open (TFO), a TCP optimization, achieves 0-RTT resumptions, and so does QUIC over UDP. There have been a lot of formal security analyses for TLS 1.3 and QUIC, but their security, when layered with their underlying transport protocols, cannot be easily compared due to the lack of a universal model. We propose a model and employs it to compare the security of TFO+TLS 1.3 and UDP+QUIC.
Shan Chen is a Ph.D. student advised by Alexandra Boldyreva in the School of Computer Science at Georgia Tech. His research focuses on applied cryptography and in particular secure channel establishment protocols.
]]>