liveBook · Manning

Session resumption

As explained in Real-World Cryptography

A protocol mechanism that reestablishes a secure session using previously established credentials or keying material without performing a complete key exchange.

When a browser returns to a familiar website, repeating the entire key exchange can add cost and delay. Session resumption lets TLS fast-track a secure session using previously established session information instead. section 9.2.1

Session resumption fits into the TLS connection sequence:

  • Negotiation finds compatible protocol versions and cryptographic algorithms. section 9.2.1
  • A normal handshake performs a key exchange and authenticates the peers. section 9.2.1
  • A resumed session avoids redoing the complete key exchange, reducing connection overhead. section 9.2.1

How Real-World Cryptography covers it

How deep it goes
Explains the motivation and role of resumption but stops short of describing its protocol messages or credential formats.
Examples
Uses browsers repeatedly connecting to the same websites as the motivating example.
What it assumes
Assumes basic familiarity with key exchange, peer authentication, and TLS handshakes.
What you can do after
Evaluate why TLS can reconnect securely without paying the full cost of another key exchange.
How it connects
Connects session resumption with TLS, key exchange, authentication, and protocol negotiation.
Cover of Real-World Cryptography
liveBookmanning.com
Read Real-World Cryptography on liveBook Get the book at manning.com

This explainer was generated by Manning's knowledge graph from the text of Real-World Cryptography. The section links point to the parts of the book it draws on.