Modern TLS Bootcamp: Cryptography, TLS & Cert Management
- Description
- Curriculum
- FAQ
- Reviews
Immerse yourself in a comprehensive exploration of data security in motion through our meticulously crafted animated course, focusing on the implementation of TLS 1.3 and TLS 1.2.
The course begins with a foundational understanding of cybersecurity’s cornerstones: Confidentiality, Integrity, Authenticity, and Non-Repudiation. It then meticulously examines essential concepts such as Hashing, Signing, Symmetric and Asymmetric encryption, and the intricate domain of Public Key Infrastructure (PKI).
A deep dive into TLS version 1.3 follows, elucidating its mechanisms for key generation and exchange, and the sophisticated AEAD protocols CHACH20-POLY1305 and AES256-GCM.
Moving forward, we scrutinise TLS version 1.2, carefully contrasting its features with TLS 1.3, highlighting the latter’s distinct advantages.
Practical application takes centre stage as you learn to configure your NGINX web server seamlessly with TLS 1.2 and TLS 1.3. Additionally, the course covers the intricate process of certificate revocation and its implementation on NGINX.
The exploration concludes with a detailed examination of certificate types and formats. The predominantly animated course format ensures an engaging yet thorough learning experience, integrating theoretical content with practical demonstrations and packet captures for an in-depth comprehension.
Join us on this educational journey, where each module is meticulously crafted to provide a profound understanding of secure data transmission. I look forward to guiding you through this learning experience. Enroll today to fortify your expertise in cybersecurity.
-
2
Section Topics -
3
Data & Cryptography
-
4
Confidentiality & Encryption
-
5
Integrity & Digital Signing
-
6
Test your knowledge -
7
Authenticity & Digital Certificates Introduction
-
8
The Concept of Authenticity & Digital Certificates
-
9
PKI Terms & Definitions
-
10
Certificate Signing Process
-
11
PKI & Certificate Authentication
-
12
Demo: Trusted CAs root certificates stores on Windows & Mac OS
-
13
PKI - The Need for Intermediate Certificates
-
14
Demo: The Certificate Trust Chain Shown in a Browser & using a Packet Capture
-
15
Authority vs Non-Authority Certificates
-
16
Demo: Showing Certificate Fields in a Browser & using a Packet Capture
-
17
Static Key Pair & CSR Generation using RSA
-
18
Demo: Static Key Pair & CSR Generation using RSA
-
19
Static Key Pair & CSR Generation using ECDSA
-
20
Demo: Static Key Pair & CSR Generation using ECDSA
-
21
The ECDSA Public Key
-
22
Comparison between ECDSA & RSA
-
23
Test your knowledge
-
24
Non-Repudiation
-
25
Bringing Cryptography Concepts together
-
26
Section Topics
-
27
What is TLS 1.3
-
28
TLS 1.3 Session Stages
-
29
TLS 1.3 Session Setup Stage Topics
-
30
Exchanging Cipher Suites During TLS 1.3 Handshake
-
31
Demo: TLS Version & Cipher Suite Agreements in a Packet Capture
-
32
Cipher Suite Agreement
-
33
Ephemeral Keys Generation in TLS 1.3
-
34
Demo: Ephemeral Keys Generation & Certificate Verify Message in a Packet Capture
-
35
Cipher Suites Supported by TLS 1.3
-
36
TLS 1.3 Session Key Generation using ECDHE
-
37
Initialisation Vector Generation using ECDHE
-
38
Test your knowledge
-
39
TLS 1.3 Encrypted Data Flow Stage
-
40
TLS 1.3 & The Use of AEAD
-
41
HMAC
-
42
AEAD Cipher Modes
-
43
The Use of XOR Operation in Encryption
-
44
CHACHA20_POLY1305 & Message Encryption
-
45
AES256_GCM & Message Encryption
-
46
CHACHA20_POLY1305 or GCM, When to Use Which
-
47
Replay Attack Prevention Using Additional Data in AEAD
-
48
Demo: Showing the Message Authentication TAG in a Packet Capture
-
49
Test your knowledge
-
50
Section Topics
-
51
TLS 1.2 Session Stages
-
52
Session Setup Stage - Topics
-
53
TLS 1.2 Session Setup Stage
-
54
Demo: TLS Version & Cipher Suite Agreements in a Packet Capture
-
55
Ephemeral Keys Generation & Key Signing in TLS 1.2
-
56
Demo: Ephemeral Keys & Signed Server's Public Ephemeral Key in a Packet Capture
-
57
Cipher Suites Supported by TLS 1.2
-
58
TLS 1.2 Session Key Generation using ECDHE
-
59
TLS 1.2 Encrypted Data Flow Stage
-
60
Test your knowledge
-
77
Server Certificate Revocation Overview
-
78
Demo: CRL Distribution Point and OCSP Responder URLs in the Server Certificate
-
79
Server Checking OCSP Responder
-
80
OCSP Stapling with NGINX
-
81
Demo: OCSP Stapling with NGINX, both for TLS 1.3 and TLS 1.2
-
82
Certificate Revocation with Let’s Encrypt CA & Certbot ACME Client
-
83
Demo: Renew a certificate, then revoke the old one in NGINX
-
84
Test your knowledge
