Reducing Processing Load in Proxies for Secure Communications

A method comprising:

• receiving, at a proxy device, a first hello message from a first device, the first hello message including a first random value;
• sending, by the proxy device, the first hello message to a second device;
• responsive to sending the first hello message to the second device, receiving, at the proxy device, a second hello message from the second device, the second hello message including a second random value;
• sending, by the proxy device, the second hello message to the first device;
• responsive to sending the second hello message to the first device, receiving, at the proxy device, a key-exchange message from the first device, the key-exchange message including a pre-master key selected by the first device;
• sending, by the proxy device, the key-exchange message to the second device;
• and
• generating, by the proxy device, a session key based on the first and second random values and the pre-master key, the session key independently generated by the first and second devices and used for encrypting communication between the first and second devices that is forwarded from the proxy device.

A method comprising:

• receiving, at a first proxy device, a first hello message from a first device, the first hello message including a first random value;
• forwarding, by the first proxy device, the first hello message to a second proxy device;
• sending, by the second proxy device, the first hello message to a second device;
• responsive to sending the first hello message to the second device, receiving, at the second proxy device, a second hello message from the second device, the second hello message including a second random value;
• forwarding, by the second proxy device, the second hello message to the first proxy device;
• sending, by the first proxy device, the second hello message to the first device;
• responsive to sending the second hello message to the first device, receiving, at the first proxy device, a key-exchange message from the first device, the key-exchange message including a pre-master key selected by the first device;
• forwarding, by the first proxy device, the key-exchange message to the second proxy device;
• sending, by the second proxy devices, the key-exchange message to the second device;
• and
• generating, by the first and second proxy devices, a session key based on the first and second random values and the pre-master key, the session key independently generated by the first and second devices and used for encrypting communication between the first and second devices that is forwarded from the first and second proxy devices.

A computer program product, embodied in a non-transitory computer-readable medium and including instructions for execution by a processor, the instructions configured to cause the processor to perform operations comprising:

• receiving, at a proxy device, a first hello message from a first device, the first hello message including a first random value;
• sending, by the proxy device, the first hello message to a second device;
• responsive to sending the first hello message to the second device, receiving, at the proxy device, a second hello message from the second device, the second hello message including a second random value;
• sending, by the proxy device, the second hello message to the first device;
• responsive to sending the second hello message to the first device, receiving, at the proxy device, a key-exchange message from the first device, the key-exchange message including a pre-master key selected by the first device;
• sending, by the proxy device, the key-exchange message to the second device;
• and
• generating, by the proxy device, a session key based on the first and second random values and the pre-master key, the session key independently generated by the first and second devices and used for encrypting communication between the first and second devices that is forwarded from the proxy device.