I would like to understand better what happens during establishment of SSL/TLS secure connection.
- The Client wants to establish a connection - ClientHello
- The server answers wit a ServerHello. This includes a randomly generated number and a server certificate
- The client creates a "pre master secret" and sends it encrypted to the server using its public key.
- Both parties create a session key from random number and pre master secret.
Is this the same as Diffie-Hellman key agreement? During DH key agreement both parties send a random key to the partner from which the session key is finally generated. DH is (in principle) completely symmetric. Why is the random number from the client called "pre-master-secret" and from the server just "random number"?