When logging in, what cryptographic transmission does the login information (ID, PW) I entered into the portal do during the authentication process?

Question

When logging in, what cryptographic transmission does the login information (ID, PW) I entered into the portal do during the authentication process?

Answer 1

Hello @김홍수 , Azure AD secures connection between clients and servers using TLS 1.2.

As summarized by Wikipedia:

When secured by TLS, connections between a client (e.g., a web browser) and a server (e.g., wikipedia.org) will have all of the following properties:

• The connection is private (or has confidentiality) because a symmetric-key algorithm is used to encrypt the data transmitted. The keys for this symmetric encryption are generated uniquely for each connection and are based on a shared secret that was negotiated at the start of the session. The server and client negotiate the details of which encryption algorithm and cryptographic keys to use before the first byte of data is transmitted (see below). The negotiation of a shared secret is both secure (the negotiated secret is unavailable to eavesdroppers and cannot be obtained, even by an attacker who places themself in the middle of the connection) and reliable (no attacker can modify the communications during the negotiation without being detected).
• The identity of the communicating parties can be authenticated using public-key cryptography. This authentication is required for the server and optional for the client.
• The connection is reliable (or has integrity) because each message transmitted includes a message integrity check using a message authentication code to prevent undetected loss or alteration of the data during transmission.

For more information about TLS 1.2 in Azure AD take a look to Enable support for TLS 1.2 in your environment for Azure AD TLS 1.1 and 1.0 deprecation.

For more information about TLS 1.2 take a look to its RFC.

Let us know if you need additional assistance. If the answer was helpful, please accept it and rate it so that others facing a similar issue can easily find a solution.