Separation of handshake and record protocol

A computer program product comprising a computer readable medium having program instructions embodied therewith, the program instructions being executable by a processor to cause the processor to perform a method for performing TLS protocol functions in separate processing instances, the method comprising:

• receiving, by a handshake processor instance, a TLS connection request from a client to a server;
• establishing, by the handshake processor instance, a TLS connection including connection secrets;
• transmitting, by the handshake processor instance, the connection secrets to a connection processor instance;
• deleting the connection secrets stored on the handshake processor instance;
• and
• processing, by the connection processor instance, application data.

A Transport Layer Security (TLS) separation system comprising:

• at least one processor;
• at least one memory component;
• a handshake processor instance configured to perform a TLS handshake between a server and a client;
• and
• a connection processor instance configured to process communication between the server and the client during a TLS session, wherein the connection processor instance is isolated from the handshake processor instance.