The following terms apply to Transport Layer Security (TLS).
- Partner authentication, server authentication, client authentication
- Indicates an algorithm that is applied to verify the authenticity
of the TLS/SSL partner. This is done by using X.509 digital certificates.
Server authentication indicates that the server authenticates itself
to the client. Client authentication indicates that the client authenticates
itself to the server after the server authentication completes.
- Data authentication protection, data authentication
- Indicates that an algorithm is applied to the data that is being
transferred. This algorithm modifies the data so that the receiving
program can verify whether the data is originated from the expected
sender.
- Data integrity protection
- Indicates that an algorithm is applied to the data that is being
transferred. This algorithm modifies the data so that the receiving
program can verify whether the data was not modified or changed by
others during the transfer.
- Privacy protection, encryption
- Indicates that an algorithm is applied to the data that is being
transferred. This algorithm encrypts or scrambles the data so that
only the receiving program can use a special key to decrypt or unscramble
the data to its original format.
The original data cannot be seen
or interpreted when the data is being transferred.
- Raw
- Indicates that the data is transferred without being modified
by any encryption, data authentication, or data integrity algorithms.
- Cipher suite
- A collection of partner authentication, data authentication, data
integrity, and encryption algorithms, which are used in combination
for a given TLS/SSL session.
Note: This term does not indicate the
algorithms that are used and does not indicate that the data is encrypted.