Universally Composable Security Analysis of TLS - Secure Sessions with Handshake and Record Layer Protocols

We present a security analysis of the complete TLS protocol in the Universal Composablesecurity framework. This analysis evaluates the composition of key exchange functionalitiesrealized by the TLS handshake with the message transmission of the TLS record layer to em-ulate secure communication sessions and is based on the adaption of the secure channel modelfrom Canetti and Krawczyk to the setting where peer identities are not necessarily known priorthe protocol invocation and may remain undisclosed. Our analysis shows that TLS, includingthe Diffie-Hellman and key transport suites in the uni-directional and bi-directional models ofauthentication, securely emulates secure communication sessions.