Encryption - Week 6

CA along with associated RA runs CMS to track their responsibilities and liabilities.

Includes CA private key when storing the key pairs so that trust is established if the CA is trusted. (TTP or RA)

Purchased after checks about requestor’s identity.

Server and client agrees upon a secret key and exchange it over the secure connection.

Public trust: DC provides confirmation about the authentication of documents, email and website.

Contains identifiable information - User’s name, company, device’s IP address etc.

Performs the necessary checks on person/company to confirm their identity if they requests the certificates.

Easily acquired by an email address.

Key management – Key generation, Key establishment, Key storage, Key usage, Key archival, Key destruction

Stores, issues, and signs digital certificates.

Improves document management, portability, easy to control, and vital.

Digital ID that can be used to link one device to another or one user to another e.g. Email.

May be incorporated with the CA to provide a single node that grants both the CA and RA roles.

Issues a certificate with a signature to prevent modifications, when client provides the credentials as ID proof.

Means to ensure that only trusted devices and users can connect to the network.

Receiver uses the associated document application that identifies the file has been digitally signed.

Are similar to physical signatures because both are unique. These are e-signature and most secure.

DC makes sure that user’s messages always reach their intended recipient. E.g. TLS/SSL encrypts website

Works through the implementation of two technologies: Certificates and Key pairs (Public key & Private key)

Uses self-signed certificates and third-party ‘vouches’ to maintain trust.

Use to manually allow the ability to revoke and extend the life of certificates.

Same technology used in cryptocurrency to create a listing of key pairs and users that is both decentralized

The developer signs the software to confirm that it is genuine to users that download it.

Set of guidelines that govern what is required of a given certificate like?

Makes CA’s public key available to help verification of signature on clients’ digital certificate.

Domain Validated certificate: Quick validation method acceptable for any website. Cheap and issue shortly.

Not one of the PKI Components

PKI relies on the use of two keys, a public and private, together create a key pair to encrypt and decrypt a message.

A secure way to store and index keys for faster access time.

Required for activities where simple passwords are inadequate for identity verification

Digital certificates are mainly used for online storefronts, email and secure file transfers.

The two hashes are compared. If they match, the authenticity of the message is confirmed.

Encrypted digest (signature) is appended to the original data and sent to the receiver.

does not create a mapping of users to certificates and relies on the keys to maintain trust rather than the user.

Common uses are Contracts and legal documents Sales agreements Financial documents Healthcare data Government forms Ship

Issues a digital certificate stating that they issuing CA to issue certificates to websites.

Issues a digital certificate stating that they trust intermediate CA to issue certificates to other CAs.

Requires software or data, use to confirm the authenticity of software downloaded through the internet.

How long will certificates be issued for?

DC encrypts internal and external communications to prevent attackers from intercepting & stealing date.

Server and Client make a secure connection with asymmetric (public-key) cryptography.

Digest is encrypted using the certificate’s private key (signature) to create the digital signature.

Only publicly trusted certificate authorities can issue digital certificates.

Done independently or jointly with the client.

For users to find them either through the electronic telephone directory or to send to those people who need it.

Needs additional personal information.

Certificate are an ID card issued to computers, software packages. They are referred as X.509 certificates.

Server hosts use to encrypt communications between a computer and the server for mail & other applications.

DC provides same encryption quality to all business. DC can be easily issued, revoked & renewed.

Have Root CA registered as a trusted CA on OS, hence it trusts Websites.

Encrypted digest (signature) is appended to the original data and sent to the receiver.

Issues a digital certificate stating that they have verified that the keys some websites uses are really theirs.

Signature is decrypted using the sender’s public key

Extended Validation: Required by large organizations deals with sensitive information and offers business authentication

Not one of the PKI Components

Used by governments and financial institutions. High level of trust is required.

The protocol on top of TLS sends its data over this symmetrically encrypted channel.

Revocation of Certificates:Revokes certificate in case of compromise of client’s private key or loss of trust on client.

Sends users their public key signed by the Issuing CA.

Organization Validated certificate: Provides small business authentication e.g. Online products through e-commerce.