{"id":2346,"date":"2026-09-05T16:36:40","date_gmt":"2026-09-05T16:36:40","guid":{"rendered":"https:\/\/wayhope.kro.kr\/?p=2346"},"modified":"2026-09-05T16:37:04","modified_gmt":"2026-09-05T16:37:04","slug":"%ed%86%a0%ed%81%b0-%ec%84%b8%ec%85%98-%ed%82%a4-%ea%b5%90%ed%99%98%ea%b3%bc-%ec%9b%b9-%ed%86%b5%ec%8b%a0-%eb%b3%b4%ec%95%88","status":"publish","type":"post","link":"https:\/\/wayhope.kro.kr\/?p=2346","title":{"rendered":"\ud1a0\ud070, \uc138\uc158, \ud0a4 \uad50\ud658\uacfc \uc6f9 \ud1b5\uc2e0 \ubcf4\uc548"},"content":{"rendered":"\n

\uc6f9 \uc11c\ube44\uc2a4\uc5d0\uc11c \ub85c\uadf8\uc778 \uc774\ud6c4 \uc0ac\uc6a9\uc790\ub97c \uc5b4\ub5bb\uac8c \uc2dd\ubcc4\ud560 \uac83\uc778\uc9c0 \uc0dd\uac01\ud558\ub2e4 \ubcf4\uba74 \uc138\uc158, \ud1a0\ud070, JWT, AES, RSA, Diffie-Hellman \uac19\uc740 \uc6a9\uc5b4\uac00 \ud55c\uaebc\ubc88\uc5d0 \ub4f1\uc7a5\ud55c\ub2e4.<\/p>\n\n\n\n

\ucc98\uc74c \ubcf4\uba74 \uc11c\ub85c \ube44\uc2b7\ud55c \uc5ed\ud560\uc744 \ud558\ub294 \uac83\ucc98\ub7fc \ubcf4\uc774\uc9c0\ub9cc \uc2e4\uc81c\ub85c\ub294 \ub2f4\ub2f9\ud558\ub294 \ubb38\uc81c\uac00 \ub2e4\ub974\ub2e4.<\/p>\n\n\n\n

\ub0b4\uac00 \uc774\ud574\ud55c \uae30\uc900\uc73c\ub85c \uc815\ub9ac\ud558\uba74 \ud06c\uac8c \uc138 \uac00\uc9c0\ub2e4.<\/p>\n\n\n\n

\uc0ac\uc6a9\uc790\ub97c \uc2dd\ubcc4\ud558\ub294 \ubc29\ubc95, \ub370\uc774\ud130\ub97c \uc554\ud638\ud654\ud558\ub294 \ubc29\ubc95, \uc554\ud638\ud654\uc5d0 \uc0ac\uc6a9\ud560 \ud0a4\ub97c \uc548\uc804\ud558\uac8c \uacf5\uc720\ud558\ub294 \ubc29\ubc95<\/strong>\uc774\ub2e4.<\/p>\n\n\n\n

\n\n\n\n

\uc138\uc158\uacfc \ud1a0\ud070<\/h2>\n\n\n\n

\uc0ac\uc6a9\uc790\uac00 \ub85c\uadf8\uc778\uc744 \ud558\uba74 \uc11c\ubc84\ub294 \ud574\ub2f9 \uc0ac\uc6a9\uc790\uac00 \uc778\uc99d\ub41c \uc0c1\ud0dc\ub77c\ub294 \uac83\uc744 \uc774\ud6c4 \uc694\uccad\uc5d0\uc11c\ub3c4 \uc54c\uc544\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n

HTTP\ub294 \uae30\ubcf8\uc801\uc73c\ub85c \uc694\uccad\ub9c8\ub2e4 \ub3c5\ub9bd\uc801\uc774\uae30 \ub54c\ubb38\uc5d0 \uc11c\ubc84 \uc785\uc7a5\uc5d0\uc11c\ub294 \uc694\uccad\uc744 \ubcf4\ub0b8 \uc0ac\ub78c\uc774 \ub204\uad6c\uc778\uc9c0 \ubcc4\ub3c4\ub85c \ud655\uc778\ud560 \ubc29\ubc95\uc774 \ud544\uc694\ud558\ub2e4.<\/p>\n\n\n\n

\uac00\uc7a5 \ub2e8\uc21c\ud55c \ubc29\ubc95\uc774 \uc138\uc158\uc774\ub2e4.<\/p>\n\n\n\n

\ub85c\uadf8\uc778 -> \uc11c\ubc84\uac00 Session \uc0dd\uc131 -> Client\uc5d0 Session ID \uc804\ub2ec -> \uc774\ud6c4 \uc694\uccad\uc5d0\uc11c Session ID \uc804\uc1a1 -> \uc11c\ubc84\uac00 Session \uc870\ud68c -> User \uc2dd\ubcc4\n<\/code><\/pre>\n\n\n\n
\uc11c\ubc84\uc5d0\ub294 \ubcf4\ud1b5 \ub2e4\uc74c\uacfc \uac19\uc740 \uc815\ubcf4\uac00 \uc800\uc7a5\ub41c\ub2e4.<\/p>\n\n\n\n
Session ID -> User ID \/ \ub9cc\ub8cc\uc2dc\uac04 \/ \uad8c\ud55c \/ \uae30\ud0c0 \uc0c1\ud0dc\n<\/code><\/pre>\n\n\n\n
\ud074\ub77c\uc774\uc5b8\ud2b8\ub294 Session ID\ub9cc \uac00\uc9c0\uace0 \uc788\uace0 \uc2e4\uc81c \uc138\uc158 \uc815\ubcf4\ub294 \uc11c\ubc84\uac00 \uad00\ub9ac\ud55c\ub2e4.<\/p>\n\n\n\n
\uc774 \ubc29\uc2dd\uc758 \uc7a5\uc810\uc740 \uc138\uc158\uc744 \uc11c\ubc84\uc5d0\uc11c \ubc14\ub85c \ud3d0\uae30\ud560 \uc218 \uc788\ub2e4\ub294 \uac83\uc774\ub2e4.<\/p>\n\n\n\n
\uc608\ub97c \ub4e4\uc5b4 \ub85c\uadf8\uc544\uc6c3\uc774\ub098 \uac15\uc81c \ub85c\uadf8\uc544\uc6c3\uc774 \ubc1c\uc0dd\ud558\uba74 \uc11c\ubc84\uc5d0\uc11c \ud574\ub2f9 Session\uc744 \uc0ad\uc81c\ud558\uba74 \ub41c\ub2e4.<\/p>\n\n\n\n
\n\n\n\n
\uc138\uc158 \ud1a0\ud070\uc740 \uad73\uc774 \uc554\ud638\ud654\ud560 \ud544\uc694\uac00 \uc5c6\ub2e4<\/h2>\n\n\n\n
\uc608\uc804\uc5d0 \uc138\uc158\uc744 \ub9cc\ub4e4\uba74\uc11c UUID\ub97c AES\ub85c \uc554\ud638\ud654\ud558\uace0 \ub79c\ub364 IV\ub97c \ubd99\uc5ec\uc11c \ud074\ub77c\uc774\uc5b8\ud2b8\uc5d0 \uc804\ub2ec\ud558\ub294 \ubc29\uc2dd\uc744 \uc0dd\uac01\ud574\ubcfc \uc218 \uc788\ub2e4.<\/p>\n\n\n\n
UUID\n -> AES Encryption\n -> IV + Ciphertext\n -> Client\n<\/code><\/pre>\n\n\n\n
\uc774 \ubc29\uc2dd \uc790\uccb4\uac00 \ud2c0\ub9b0 \uac83\uc740 \uc544\ub2c8\ub2e4.<\/p>\n\n\n\n
\ub2e4\ub9cc \uc5ec\uae30\uc11c \uc911\uc694\ud55c \uac83\uc740 \uc554\ud638\ud654\uc640 \uc778\uc99d\uc740 \ub2e4\ub978 \ubb38\uc81c<\/strong>\ub77c\ub294 \uc810\uc774\ub2e4.<\/p>\n\n\n\n
\uacf5\uaca9\uc790\uac00 \uc554\ud638\ubb38\uc744 \ud0c8\ucde8\ud588\ub2e4\uace0 \uac00\uc815\ud574\ubcf4\uc790.<\/p>\n\n\n\n
IV + Ciphertext\n<\/code><\/pre>\n\n\n\n
\ub97c \ubcf5\ud638\ud654\ud558\uc9c0 \ubabb\ud558\ub354\ub77c\ub3c4 \uadf8 \uac12\uc744 \uadf8\ub300\ub85c \uc11c\ubc84\uc5d0 \ubcf4\ub0b4\uc11c \uc778\uc99d\ud560 \uc218 \uc788\ub2e4\uba74 \uacb0\uad6d \uc138\uc158 \ud1a0\ud070 \uc5ed\ud560\uc744 \ud55c\ub2e4.<\/p>\n\n\n\n
\ub530\ub77c\uc11c \uc138\uc158 \ud1a0\ud070\uc740 \ub370\uc774\ud130\ub97c \uc228\uae30\ub294 \uac83\ubcf4\ub2e4 \uc608\uce21\ud560 \uc218 \uc5c6\uac8c \ub9cc\ub4dc\ub294 \uac83<\/strong>\uc774 \uc911\uc694\ud558\ub2e4.<\/p>\n\n\n\n
\uc2e4\uc81c\ub85c\ub294 \ucda9\ubd84\ud788 \uae34 \ub09c\uc218\ub97c \uc0dd\uc131\ud558\ub294 \ubc29\uc2dd\uc774 \ud6e8\uc52c \ub2e8\uc21c\ud558\ub2e4.<\/p>\n\n\n\n
CSPRNG\n -> 256-bit Random Token\n -> Session Token\n<\/code><\/pre>\n\n\n\n
\uc11c\ubc84\uc5d0\uc11c\ub294 \ud574\ub2f9 \ud1a0\ud070\uacfc \uc0ac\uc6a9\uc790\ub97c \uc5f0\uacb0\ud55c\ub2e4.<\/p>\n\n\n\n
Session Token -> User ID\n<\/code><\/pre>\n\n\n\n
\uc6f9 \ud658\uacbd\uc774\ub77c\uba74 \uc77c\ubc18\uc801\uc73c\ub85c Secure<\/code>, HttpOnly<\/code>, SameSite<\/code> \uac19\uc740 Cookie \ubcf4\uc548 \uc635\uc158\ub3c4 \ud568\uaed8 \uace0\ub824\ud55c\ub2e4.<\/p>\n\n\n\n
\n\n\n\n
HTTPS\uac00 \ud558\ub294 \uc77c<\/h2>\n\n\n\n
\uc5ec\uae30\uc11c \uc138\uc158\uacfc \ubcc4\uac1c\ub85c \ub610 \ud558\ub098\uc758 \ubb38\uc81c\uac00 \uc0dd\uae34\ub2e4.<\/p>\n\n\n\n
\ud074\ub77c\uc774\uc5b8\ud2b8\uac00 \uc11c\ubc84\uc5d0 \uc138\uc158 \ud1a0\ud070\uc744 \ubcf4\ub0b4\ub294 \uacfc\uc815 \uc790\uccb4\uac00 \uc548\uc804\ud574\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n
HTTP\uc5d0\uc11c \uadf8\ub0e5 \uc804\uc1a1\ud558\uba74 \ub124\ud2b8\uc6cc\ud06c\ub97c \uac10\uccad\ud560 \uc218 \uc788\ub294 \uacf5\uaca9\uc790\uac00 \ub370\uc774\ud130\ub97c \ubcfc \uc218 \uc788\ub2e4.<\/p>\n\n\n\n
Client -> HTTP -> Server\n<\/code><\/pre>\n\n\n\n
\uc774 \ubb38\uc81c\ub97c \ud574\uacb0\ud558\ub294 \uac83\uc774 HTTPS\ub2e4.<\/p>\n\n\n\n
HTTPS\ub294 \ub2e8\uc21c\ud788 \ub370\uc774\ud130\ub97c AES\ub85c \uc554\ud638\ud654\ud558\ub294 \uae30\ub2a5\uc774 \uc544\ub2c8\ub2e4.<\/p>\n\n\n\n
TLS Handshake \uacfc\uc815\uc5d0\uc11c \ud1b5\uc2e0 \ub2f9\uc0ac\uc790\ub07c\ub9ac \uc554\ud638\ud654\uc5d0 \uc0ac\uc6a9\ud560 \ud0a4\ub97c \uc548\uc804\ud558\uac8c \ud569\uc758\ud558\uace0, \uc11c\ubc84\uc758 \uc2e0\uc6d0\uc744 \uc778\uc99d\ud55c \ub2e4\uc74c \uc2e4\uc81c \ub370\uc774\ud130\ub97c \ub300\uce6d\ud0a4 \uc554\ud638\ud654\ub85c \uc804\uc1a1\ud55c\ub2e4.<\/p>\n\n\n\n
\ud604\ub300\uc801\uc778 TLS 1.3\uc5d0\uc11c\ub294 \uc77c\ubc18\uc801\uc73c\ub85c ECDHE \uacc4\uc5f4\uc758 \ud0a4 \uad50\ud658\uc774 \uc0ac\uc6a9\ub41c\ub2e4.<\/p>\n\n\n\n
\uac1c\ub150\uc801\uc73c\ub85c \ubcf4\uba74 \ub2e4\uc74c\uacfc \uac19\ub2e4.<\/p>\n\n\n\n
Client <-> Server\n        ECDHE\n          ->\n     Shared Secret\n          ->\n        HKDF\n          ->\n     Session Keys\n          ->\n   AES-GCM \/ ChaCha20-Poly1305\n<\/code><\/pre>\n\n\n\n
\n\n\n\n
Diffie-Hellman\uc740 AES \ud0a4\ub97c \uc9c1\uc811 \ubcf4\ub0b4\ub294 \uac83\uc774 \uc544\ub2c8\ub2e4<\/h2>\n\n\n\n
\uc5ec\uae30\uc11c \uc790\uc8fc \ud5f7\uac08\ub9ac\ub294 \ubd80\ubd84\uc774 \uc788\ub2e4.<\/p>\n\n\n\n
Diffie-Hellman\uc740 AES \ud0a4 \uc790\uccb4\ub97c \uc0c1\ub300\ubc29\uc5d0\uac8c \uc804\ub2ec\ud558\ub294 \ubc29\uc2dd\uc774 \uc544\ub2c8\ub2e4.<\/p>\n\n\n\n
\uc591\ucabd\uc774 \uc11c\ub85c \uacf5\uac1c\uac12\uc744 \uc8fc\uace0\ubc1b\uc740 \ub2e4\uc74c \ub3d9\uc77c\ud55c \uacf5\uc720 \ube44\ubc00\uac12\uc744 \uac01\uac01 \uacc4\uc0b0\ud558\ub294 \ubc29\uc2dd<\/strong>\uc774\ub2e4.<\/p>\n\n\n\n
\uac1c\ub150\uc801\uc73c\ub85c:<\/p>\n\n\n\n
Client                         Server\n\nPrivate A                     Private B\nPublic A  ----------------->  Public B\nPublic B  <-----------------  Public A\n\n        Shared Secret \uacc4\uc0b0\n               \u2193\n        \uc591\ucabd\uc5d0\uc11c \ub3d9\uc77c\ud55c \uac12\n               \u2193\n             KDF\n               \u2193\n          AES Key \uc0dd\uc131\n<\/code><\/pre>\n\n\n\n
\ub530\ub77c\uc11c \uc2e4\uc81c\ub85c\ub294:<\/p>\n\n\n\n
ECDHE\n -> Shared Secret\n -> HKDF\n -> AES Key\n<\/code><\/pre>\n\n\n\n
\uc640 \uac19\uc740 \ud750\ub984\uc73c\ub85c \uc774\ud574\ud558\ub294 \uac83\uc774 \uc815\ud655\ud558\ub2e4.<\/p>\n\n\n\n
\n\n\n\n
\uadf8\ub807\ub2e4\uba74 HTTPS \uc5c6\uc774 \uc9c1\uc811 \uad6c\ud604\ud558\uba74 \ub418\ub294\uac00<\/h2>\n\n\n\n
\uae30\uc220\uc801\uc73c\ub85c\ub294 \uac00\ub2a5\ud558\ub2e4.<\/p>\n\n\n\n
ECDH\n -> Shared Secret\n -> KDF\n -> AES-GCM\n -> \uc554\ud638\ud654 \ud1b5\uc2e0\n<\/code><\/pre>\n\n\n\n
\ud558\uc9c0\ub9cc \uc774\uac83\ub9cc \uad6c\ud604\ud55c\ub2e4\uace0 HTTPS\uc640 \ub3d9\uc77c\ud55c \ubcf4\uc548\uc774 \ub418\ub294 \uac83\uc740 \uc544\ub2c8\ub2e4.<\/p>\n\n\n\n
\uac00\uc7a5 \uc911\uc694\ud55c \ubb38\uc81c\uac00 \uc911\uac04\uc790 \uacf5\uaca9<\/strong>\uc774\ub2e4.<\/p>\n\n\n\n
\uacf5\uaca9\uc790\uac00 \ud1b5\uc2e0 \uc911\uac04\uc5d0 \ub07c\uc5b4\ub4e4\uba74:<\/p>\n\n\n\n
Client <-> Attacker <-> Server\n<\/code><\/pre>\n\n\n\n
\uad6c\uc870\ub97c \ub9cc\ub4e4 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n
\ud074\ub77c\uc774\uc5b8\ud2b8\ub294 \uacf5\uaca9\uc790\uc640 \ud0a4\ub97c \ub9cc\ub4e4\uace0 \uc11c\ubc84 \uc5ed\uc2dc \uacf5\uaca9\uc790\uc640 \ub2e4\ub978 \ud0a4\ub97c \ub9cc\ub4e4\uac8c \ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n
\uadf8\ub798\uc11c \uc2e4\uc81c TLS\ub294 \ub2e8\uc21c\ud55c \ud0a4 \uad50\ud658 \ud504\ub85c\ud1a0\ucf5c\uc774 \uc544\ub2c8\ub2e4.<\/p>\n\n\n\n
\uc11c\ubc84 \uc778\uc99d, \uc778\uc99d\uc11c \uac80\uc99d, \ud578\ub4dc\uc170\uc774\ud06c \ubb34\uacb0\uc131, \ud0a4 \ud30c\uc0dd, \uc554\ud638\ud654 \uc54c\uace0\ub9ac\uc998, \uc7ac\uc804\uc1a1 \ubc29\uc9c0 \ub4f1 \uc5ec\ub7ec \uc694\uc18c\uac00 \uac19\uc774 \ub4e4\uc5b4\uac04\ub2e4.<\/p>\n\n\n\n
\uacb0\uad6d \uc2e4\ubb34\uc5d0\uc11c\ub294 \uc9c1\uc811 ECDH + AES<\/code> \ud504\ub85c\ud1a0\ucf5c\uc744 \ub9cc\ub4dc\ub294 \uac83\ubcf4\ub2e4 \uac80\uc99d\ub41c TLS\ub97c \uc0ac\uc6a9\ud558\ub294 \uac83\uc774 \ud6e8\uc52c \uc548\uc804\ud558\ub2e4.<\/p>\n\n\n\n
\n\n\n\n
AES\ub294 \ub370\uc774\ud130\ub97c \ubcf4\ud638\ud558\uace0 RSA \uac19\uc740 \ube44\ub300\uce6d \uc554\ud638\ub294 \ub2e4\ub978 \uc5ed\ud560\uc744 \ud55c\ub2e4<\/h2>\n\n\n\n
\ub300\uce6d\ud0a4\uc640 \ube44\ub300\uce6d\ud0a4\uc758 \ucc28\uc774\ub3c4 \uc5ec\uae30\uc11c \uc815\ub9ac\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n
AES\ub294 \uac19\uc740 \ud0a4\ub97c \uc0ac\uc6a9\ud55c\ub2e4.<\/p>\n\n\n\n
AES Key\n -> Encrypt\n -> Ciphertext\n\nAES Key\n -> Decrypt\n -> Plaintext\n<\/code><\/pre>\n\n\n\n
\uc18d\ub3c4\uac00 \ube60\ub974\uae30 \ub54c\ubb38\uc5d0 \uc2e4\uc81c \ub300\ub7c9\uc758 \ub370\uc774\ud130\ub97c \uc554\ud638\ud654\ud558\ub294 \ub370 \uc801\ud569\ud558\ub2e4.<\/p>\n\n\n\n
\ubc18\uba74 RSA \uac19\uc740 \ube44\ub300\uce6d \uc554\ud638\ub294 \uacf5\uac1c\ud0a4\uc640 \uac1c\uc778\ud0a4\ub97c \uc0ac\uc6a9\ud55c\ub2e4.<\/p>\n\n\n\n
Public Key\nPrivate Key\n<\/code><\/pre>\n\n\n\n
\ub450 \ud0a4\uc758 \uc5ed\ud560\uc774 \ub2e4\ub974\ub2e4.<\/p>\n\n\n\n
\ud2b9\ud788 \ud604\ub300 \uc2dc\uc2a4\ud15c\uc5d0\uc11c\ub294 RSA\ub97c \ub370\uc774\ud130 \uc804\uccb4\ub97c \uc554\ud638\ud654\ud558\ub294 \uc6a9\ub3c4\ub85c \uc0ac\uc6a9\ud558\ub294 \uac83\ubcf4\ub2e4 \uc804\uc790\uc11c\uba85<\/strong>\uc5d0\uc11c \ub9cc\ub098\ub294 \uacbd\uc6b0\uac00 \ub9ce\ub2e4.<\/p>\n\n\n\n
\n\n\n\n
\uc804\uc790\uc11c\uba85<\/h2>\n\n\n\n
\uc804\uc790\uc11c\uba85\uc758 \ubaa9\uc801\uc740 \uc554\ud638\ud654\uc640 \ub2e4\ub974\ub2e4.<\/p>\n\n\n\n
\uc554\ud638\ud654\uc758 \ubaa9\uc801\uc740:<\/p>\n\n\n\n
\ub370\uc774\ud130\ub97c \ub2e4\ub978 \uc0ac\ub78c\uc774 \ubcfc \uc218 \uc5c6\uac8c \ud55c\ub2e4.\n<\/code><\/pre>\n\n\n\n
\uc804\uc790\uc11c\uba85\uc758 \ubaa9\uc801\uc740:<\/p>\n\n\n\n
\ub370\uc774\ud130\uac00 \ubcc0\uc870\ub418\uc9c0 \uc54a\uc558\ub294\uc9c0 \ud655\uc778\ud55c\ub2e4.\n\ub204\uac00 \uc11c\uba85\ud588\ub294\uc9c0 \ud655\uc778\ud55c\ub2e4.\n<\/code><\/pre>\n\n\n\n
RSA \uae30\ubc18 JWT \uc11c\uba85\uc744 \uc608\ub85c \ub4e4\uba74 \ub2e4\uc74c\uacfc \uac19\ub2e4.<\/p>\n\n\n\n
Header + Payload\n       \u2193\n    SHA-256\n       \u2193\nPrivate Key\ub85c \uc11c\uba85\n       \u2193\nSignature\n<\/code><\/pre>\n\n\n\n
\uac80\uc99d\ud558\ub294 \ucabd\uc5d0\uc11c\ub294 \uc11c\ubc84\uc758 Public Key\ub97c \uc774\uc6a9\ud55c\ub2e4.<\/p>\n\n\n\n
Header + Payload\n       +\nSignature\n       \u2193\nPublic Key\ub85c \uac80\uc99d\n<\/code><\/pre>\n\n\n\n
\uc5ec\uae30\uc11c \uc911\uc694\ud55c \uc810\uc740 Private Key\ub294 \ube44\ubc00\uc774\uc5b4\uc57c \ud558\uc9c0\ub9cc Public Key\ub294 \uacf5\uac1c\ud574\ub3c4 \ub41c\ub2e4\ub294 \uac83<\/strong>\uc774\ub2e4.<\/p>\n\n\n\n
Public Key\ub97c \uc54c\uace0 \uc788\ub2e4\uace0 \ud574\uc11c Private Key\ub97c \uc54c\uc544\ub0bc \uc218 \uc788\ub294 \uac83\uc740 \uc544\ub2c8\uba70, Public Key\ub97c \uc774\uc6a9\ud574 \uc0c8\ub85c\uc6b4 \uc815\uc0c1 \uc11c\uba85\uc744 \uc0dd\uc131\ud560 \uc218\ub3c4 \uc5c6\ub2e4.<\/p>\n\n\n\n
\n\n\n\n
JWT<\/h2>\n\n\n\n
JWT\ub3c4 \uc774 \uac1c\ub150 \uc704\uc5d0\uc11c \ubcf4\uba74 \uc5b4\ub835\uc9c0 \uc54a\ub2e4.<\/p>\n\n\n\n
\uc77c\ubc18\uc801\uc778 JWT\ub294:<\/p>\n\n\n\n
Header.Payload.Signature\n<\/code><\/pre>\n\n\n\n
\uad6c\uc870\ub2e4.<\/p>\n\n\n\n
\uc608\ub97c \ub4e4\uc5b4 RS256\uc744 \uc0ac\uc6a9\ud558\uba74:<\/p>\n\n\n\n
Header\n+\nPayload\n    \u2193\nSignature \uc0dd\uc131\n    \u2193\nPrivate Key\n<\/code><\/pre>\n\n\n\n
\uadf8\ub9ac\uace0 \ub2e4\ub978 \uc11c\ubc84\ub098 \ud074\ub77c\uc774\uc5b8\ud2b8\ub294 Public Key\ub97c \uc774\uc6a9\ud574 Signature\ub97c \uac80\uc99d\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n
\ub530\ub77c\uc11c JWT\uc758 Payload\ub294 \uae30\ubcf8\uc801\uc73c\ub85c \uc554\ud638\ud654\ub41c \ub370\uc774\ud130\uac00 \uc544\ub2c8\ub2e4.<\/p>\n\n\n\n
Base64URL\ub85c \uc778\ucf54\ub529\ub418\uc5b4 \uc788\uae30 \ub54c\ubb38\uc5d0 \ub0b4\uc6a9\uc744 \ub514\ucf54\ub529\ud574\uc11c \ubcfc \uc218 \uc788\ub2e4.<\/p>\n\n\n\n
JWT\n -> Header\n -> Payload\n -> Signature\n<\/code><\/pre>\n\n\n\n
JWT\uc5d0\uc11c RS256<\/code>\uc740 RSA\uc640 SHA-256\uc744 \uc774\uc6a9\ud55c \uc11c\uba85 \ubc29\uc2dd\uc774\uace0, HS256<\/code>\uc740 RSA\uac00 \uc544\ub2c8\ub77c HMAC-SHA256\uc744 \uc0ac\uc6a9\ud558\ub294 \ub300\uce6d\ud0a4 \uae30\ubc18 \ubc29\uc2dd\uc774\ub2e4.<\/p>\n\n\n\n
\uc774 \ucc28\uc774\ub294 \uc0c1\ub2f9\ud788 \uc911\uc694\ud558\ub2e4.<\/p>\n\n\n\n
RS256\n -> Private Key\ub85c \uc11c\uba85\n -> Public Key\ub85c \uac80\uc99d\n\nHS256\n -> Secret Key\ub85c \uc11c\uba85\n -> \ub3d9\uc77c\ud55c Secret Key\ub85c \uac80\uc99d\n<\/code><\/pre>\n\n\n\n
\n\n\n\n
JWT\uc640 \uc138\uc158\uc758 \ucc28\uc774<\/h2>\n\n\n\n
\uc138\uc158\uacfc JWT\ub294 \ub458 \ub2e4 \uc778\uc99d \uc0c1\ud0dc\ub97c \uc804\ub2ec\ud558\ub294 \ub370 \uc0ac\uc6a9\ud560 \uc218 \uc788\uc9c0\ub9cc \uad6c\uc870\uac00 \ub2e4\ub974\ub2e4.<\/p>\n\n\n\n
\uc804\ud1b5\uc801\uc778 \uc138\uc158\uc740:<\/p>\n\n\n\n
Client\n -> Session ID\n -> Server\n -> Session Store\n -> User \uc815\ubcf4 \uc870\ud68c\n<\/code><\/pre>\n\n\n\n
JWT\ub294:<\/p>\n\n\n\n
Client\n -> JWT\n -> Signature \uac80\uc99d\n -> Payload \ud655\uc778\n -> User \uc2dd\ubcc4\n<\/code><\/pre>\n\n\n\n
JWT\ub294 \ud1a0\ud070 \uc790\uccb4\uc5d0 \ud544\uc694\ud55c \uc815\ubcf4\ub97c \ub123\uc744 \uc218 \uc788\uae30 \ub54c\ubb38\uc5d0 \uc11c\ubc84 \uce21 \uc138\uc158 \uc800\uc7a5\uc18c\uc5d0 \ub300\ud55c \uc758\uc874\uc131\uc744 \uc904\uc77c \uc218 \uc788\ub2e4.<\/p>\n\n\n\n
\ubc18\ub300\ub85c \uc11c\ubc84\uc5d0\uc11c \uc138\uc158\uc744 \uc9c1\uc811 \uad00\ub9ac\ud558\ub294 \ubc29\uc2dd\uc740 \uc138\uc158\uc744 \uc989\uc2dc \ud3d0\uae30\ud558\uac70\ub098 \uc0c1\ud0dc\ub97c \ubcc0\uacbd\ud558\uae30 \uc27d\ub2e4.<\/p>\n\n\n\n
\ub530\ub77c\uc11c JWT\uac00 \ubb34\uc870\uac74 \uc138\uc158\ubcf4\ub2e4 \uc88b\uc740 \uac83\ub3c4 \uc544\ub2c8\uace0, \uc138\uc158\uc774 \ubb34\uc870\uac74 \ub354 \uc88b\uc740 \uac83\ub3c4 \uc544\ub2c8\ub2e4.<\/p>\n\n\n\n
\uc2dc\uc2a4\ud15c\uc758 \uc694\uad6c\uc0ac\ud56d\uc5d0 \ub530\ub77c \uc120\ud0dd\ud558\uba74 \ub41c\ub2e4.<\/p>\n\n\n\n
\n\n\n\n
\ud1a0\ud070 \ubcf4\uc548\uc5d0\uc11c \uac00\uc7a5 \uc911\uc694\ud55c \uac83\uc740 \uc554\ud638\ud654\uac00 \uc544\ub2c8\ub2e4<\/h2>\n\n\n\n
\uc778\uc99d \ud1a0\ud070\uc744 \uc124\uacc4\ud560 \ub54c \uac00\uc7a5 \ud754\ud55c \ucc29\uac01\uc740 \ub2e4\uc74c\uacfc \uac19\ub2e4.<\/p>\n\n\n\n
UUID\n -> AES\n -> \uc548\uc804\ud55c \ud1a0\ud070\n<\/code><\/pre>\n\n\n\n
\ud558\uc9c0\ub9cc \uc2e4\uc81c\ub85c \uc911\uc694\ud55c \uac83\uc740 \uc608\uce21 \ubd88\uac00\ub2a5\uc131, \ud0c8\ucde8 \ubc29\uc9c0, \ub9cc\ub8cc, \ud3d0\uae30, \uc7ac\uc0ac\uc6a9 \ubc29\uc9c0<\/strong>\ub2e4.<\/p>\n\n\n\n
\uc608\ub97c \ub4e4\uc5b4 256\ube44\ud2b8 \ub09c\uc218\ub85c \uc0dd\uc131\ud55c \ud1a0\ud070\uc774\ub77c\uba74 \uacf5\uaca9\uc790\uac00 \uc815\uc0c1\uc801\uc778 \ud1a0\ud070\uc744 \ucd94\uce21\ud558\ub294 \uac83\uc740 \ud604\uc2e4\uc801\uc73c\ub85c \uc5b4\ub835\ub2e4.<\/p>\n\n\n\n
CSPRNG\n -> 256-bit Random\n -> Session Token\n<\/code><\/pre>\n\n\n\n
\uadf8\ub9ac\uace0 HTTPS\uac00 \ud1a0\ud070\uc744 \uc804\uc1a1\ud558\ub294 \uad6c\uac04\uc744 \ubcf4\ud638\ud55c\ub2e4.<\/p>\n\n\n\n
Session Token\n      \u2193\nHTTPS \/ TLS\n      \u2193\nServer\n<\/code><\/pre>\n\n\n\n
\uc5ec\uae30\uc5d0 \uc801\uc808\ud55c \ub9cc\ub8cc\uc640 \ud3d0\uae30 \uc815\ucc45\uc744 \ucd94\uac00\ud55c\ub2e4.<\/p>\n\n\n\n
Random Token\n -> HTTPS\n -> Expiration\n -> Revocation\n -> Secure Storage\n<\/code><\/pre>\n\n\n\n
\uc774\uac83\uc774 \uc2e4\uc81c \uc138\uc158 \ubcf4\uc548\uc5d0\uc11c \uc911\uc694\ud55c \ubd80\ubd84\uc774\ub2e4.<\/p>\n\n\n\n
\n\n\n\n
\uc804\uccb4 \uad6c\uc870\ub97c \ud55c \ubc88\uc5d0 \ubcf4\uba74<\/h2>\n\n\n\n
\uc6f9 \uc778\uc99d\uacfc \ud1b5\uc2e0 \ubcf4\uc548\uc744 \ud558\ub098\uc758 \ud750\ub984\uc73c\ub85c \ubb36\uc73c\uba74 \ub2e4\uc74c\uacfc \uac19\ub2e4.<\/p>\n\n\n\n
Login\n -> Authentication\n -> Session \/ Token \ubc1c\uae09\n -> HTTPS\ub97c \ud1b5\ud55c \uc804\ub2ec\n -> \uc774\ud6c4 \uc694\uccad\uc5d0\uc11c Token \uc804\uc1a1\n -> Server\uc5d0\uc11c \uac80\uc99d\n -> User \uc2dd\ubcc4\n<\/code><\/pre>\n\n\n\n
HTTPS \ub0b4\ubd80\uc5d0\uc11c\ub294:<\/p>\n\n\n\n
TLS Handshake\n -> Server Authentication\n -> ECDHE\n -> Shared Secret\n -> HKDF\n -> AES-GCM \/ ChaCha20-Poly1305\n -> Encrypted Communication\n<\/code><\/pre>\n\n\n\n
JWT\ub97c \uc0ac\uc6a9\ud55c\ub2e4\uba74:<\/p>\n\n\n\n
Header + Payload\n -> Signature\n -> Private Key\n -> JWT \ubc1c\uae09\n -> Client \uc804\ub2ec\n -> Public Key\ub85c Signature \uac80\uc99d\n<\/code><\/pre>\n\n\n\n
\uac01 \uae30\uc220\uc758 \uc5ed\ud560\uc744 \uad6c\ubd84\ud558\uba74 \ubcf5\uc7a1\ud560 \uac83\uc774 \uc5c6\ub2e4.<\/p>\n\n\n\n
Session \/ Token\n -> \uc0ac\uc6a9\uc790\ub97c \uc2dd\ubcc4\ud558\uae30 \uc704\ud55c \uc778\uc99d \uc218\ub2e8\n\nECDHE\n -> \uc554\ud638\ud654\uc5d0 \uc0ac\uc6a9\ud560 \ud0a4\ub97c \uc548\uc804\ud558\uac8c \ud569\uc758\n\nHKDF\n -> \uacf5\uc720 \ube44\ubc00\uc5d0\uc11c \uc2e4\uc81c \uc0ac\uc6a9\ud560 \ud0a4\ub97c \ud30c\uc0dd\n\nAES-GCM\n -> \uc2e4\uc81c \ub370\uc774\ud130\ub97c \uc554\ud638\ud654\ud558\uace0 \ubb34\uacb0\uc131\uc744 \uac80\uc99d\n\nRSA \/ ECDSA \/ EdDSA\n -> \uc804\uc790\uc11c\uba85\uacfc \uc778\uc99d\uc5d0 \uc0ac\uc6a9\n\nTLS\n -> \uc704 \uc694\uc18c\ub4e4\uc744 \uc870\ud569\ud574 \uc548\uc804\ud55c \ud1b5\uc2e0 \ucc44\ub110 \uc81c\uacf5\n<\/code><\/pre>\n\n\n\n
\uacb0\uad6d \ubcf4\uc548 \uc2dc\uc2a4\ud15c\uc740 \ud558\ub098\uc758 \uc554\ud638\ud654 \uc54c\uace0\ub9ac\uc998\uc73c\ub85c \ud574\uacb0\ud558\ub294 \uac83\uc774 \uc544\ub2c8\ub2e4.<\/strong><\/p>\n\n\n\n
\uc778\uc99d\uacfc \uc138\uc158 \uad00\ub9ac, \ud0a4 \uad50\ud658, \ub370\uc774\ud130 \uc554\ud638\ud654, \ubb34\uacb0\uc131 \uac80\uc99d, \uc11c\ubc84 \uc778\uc99d\uc774 \uac01\uac01 \ub2e4\ub978 \ubb38\uc81c\uc774\uace0, TLS \uac19\uc740 \ud504\ub85c\ud1a0\ucf5c\uc740 \uc774 \ubb38\uc81c\ub4e4\uc744 \ud558\ub098\uc758 \uac80\uc99d\ub41c \ud1b5\uc2e0 \uad6c\uc870\ub85c \ubb36\uc5b4\ub193\uc740 \uac83\uc774\ub2e4.<\/p>\n","protected":false},"excerpt":{"rendered":"
\uc6f9 \uc11c\ube44\uc2a4\uc5d0\uc11c \ub85c\uadf8\uc778 \uc774\ud6c4 \uc0ac\uc6a9\uc790\ub97c \uc5b4\ub5bb\uac8c \uc2dd\ubcc4\ud560 \uac83\uc778\uc9c0 \uc0dd\uac01\ud558\ub2e4 \ubcf4\uba74 \uc138\uc158, \ud1a0\ud070, JWT, AES, RSA, Diffie-Hellman \uac19\uc740 \uc6a9\uc5b4\uac00 \ud55c\uaebc\ubc88\uc5d0 \ub4f1\uc7a5\ud55c\ub2e4. \ucc98\uc74c \ubcf4\uba74 \uc11c\ub85c \ube44\uc2b7\ud55c \uc5ed\ud560\uc744 \ud558\ub294 \uac83\ucc98\ub7fc \ubcf4\uc774\uc9c0\ub9cc \uc2e4\uc81c\ub85c\ub294 \ub2f4\ub2f9\ud558\ub294 \ubb38\uc81c\uac00 \ub2e4\ub974\ub2e4. \ub0b4\uac00 \uc774\ud574\ud55c \uae30\uc900\uc73c\ub85c \uc815\ub9ac\ud558\uba74 \ud06c\uac8c \uc138 \uac00\uc9c0\ub2e4. \uc0ac\uc6a9\uc790\ub97c \uc2dd\ubcc4\ud558\ub294 \ubc29\ubc95, \ub370\uc774\ud130\ub97c \uc554\ud638\ud654\ud558\ub294 \ubc29\ubc95, \uc554\ud638\ud654\uc5d0 \uc0ac\uc6a9\ud560 \ud0a4\ub97c \uc548\uc804\ud558\uac8c \uacf5\uc720\ud558\ub294 \ubc29\ubc95\uc774\ub2e4. \uc138\uc158\uacfc \ud1a0\ud070 \uc0ac\uc6a9\uc790\uac00 \ub85c\uadf8\uc778\uc744 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-2346","post","type-post","status-publish","format-standard","hentry","category-dev-notes"],"_links":{"self":[{"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=\/wp\/v2\/posts\/2346","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2346"}],"version-history":[{"count":2,"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=\/wp\/v2\/posts\/2346\/revisions"}],"predecessor-version":[{"id":2348,"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=\/wp\/v2\/posts\/2346\/revisions\/2348"}],"wp:attachment":[{"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2346"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2346"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wayhope.kro.kr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2346"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}