Why is the TLS handshake a good example of how a cryptographic protocol combines multiple algorithms?
The TLS handshake explicitly enumerates the algorithms (cipher suite) and uses them in a precise sequence: key exchange (DH/ECDH), authentication (RSA/ECDSA signature on cert), bulk encryption (AES-GCM), and HMAC/HKDF for derivation — none of them work without the protocol orchestrating them.
A TLS 1.2 cipher suite like TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 declares:
| Slot | Algorithm | Why this slot needs an algorithm |
|---|---|---|
| Key exchange | ECDHE | Establish a shared session key over public network — provides forward secrecy |
| Authentication | RSA | Server proves identity by signing the DH params with its long-term cert key |
| Bulk encryption | AES-128 | Encrypts the actual data records |
| AEAD mode | GCM | Combined encryption + authentication tag |
| PRF / Key derivation | SHA-256 (in HKDF) | Derives session keys from the master secret |
Each algorithm alone is just a primitive:
- AES alone: encrypts a block.
- RSA alone: signs/encrypts a message.
- SHA-256 alone: hashes data.
- ECDH alone: computes a shared secret.
The protocol says:
- ClientHello / ServerHello → agree on the cipher suite.
- Server sends Certificate + signed ECDH parameters.
- Client verifies cert chain, derives shared secret with ECDH.
- Both derive symmetric keys from the shared secret using HKDF-SHA256.
- Switch to AES-128-GCM for the record layer.
Without the protocol: the algorithms can't co-operate. You'd have a fast block cipher, a signature scheme, a key exchange — but no way to actually establish a secure channel between two strangers.
Without the algorithms: the protocol is a sequence diagram with empty boxes.
Tip: The TLS handshake is the canonical example used in nearly every protocols course because it touches every category — key exchange, authentication, encryption, integrity, key derivation, downgrade-attack mitigation (Finished messages MAC the entire transcript). Mastering it is the foundation for understanding everything else.