We think you have liked this presentation. If you wish to download it, please recommend it to your friends in any social system. Share buttons are a little bit lower. Thank you!
Presentation is loading. Please wait.
Published byEmma Hamilton
Modified over 4 years ago
Asymmetric Digital Signatures And Key Exchange Prof. Ravi Sandhu
2 © Ravi Sandhu DIGITAL SIGNATURES Signature Algorithm S Verification Algorithm V Plain- text Yes/No Plaintext + Signature INSECURE CHANNEL A's Private Key A's Public Key RELIABLE CHANNEL A A B B
3 © Ravi Sandhu COMPARE PUBLIC KEY ENCRYPTION Encryption Algorithm E Decryption Algorithm D Plain- text Plain- text Ciphertext INSECURE CHANNEL B's Public Key B's Private Key RELIABLE CHANNEL A A B B
4 © Ravi Sandhu DIGITAL SIGNATURES IN RSA RSA has a unique property, not shared by other public key systems Encryption and decryption commute (M e mod n) d mod n = Mencryption (M d mod n) e mod n = Msignature Same public key can be use for encryption and signature
5 © Ravi Sandhu EL GAMAL AND VARIANTS encryption only signature only 1000s of variants including NISTs DSA
6 © Ravi Sandhu NIST DIGITAL SIGNATURE STANDARD System-wide constants p512-1024 bit prime q160 bit prime divisor of p-1 g g = h ((p-1)/q) mod p, 1<h<p-1 El-Gamal variant separate algorithms for digital signature and public-key encryption
7 © Ravi Sandhu NIST DIGITAL SIGNATURE STANDARD to sign message m: private key x choose random r compute v = (g r mod p) mod q compute s = (m+xv)/k mod q signature is (s,v,m) to verify signature: public key y compute u1 = m/s mod q compute u2 = v/s mod q verify that v = (g u1 *y u2 mod p) mod q
8 © Ravi Sandhu NIST DIGITAL SIGNATURE STANDARD signature does not repeat, since r will be different on each occasion if same random number r is used for two messages, the system is broken message expands by a factor of 2 RSA signatures do repeat, and there is no message expansion
9 © Ravi Sandhu DIFFIE-HELLMAN KEY AGREEMENT A A B B y A =a x A mod p public key private key x A private key x B y B =a x B mod p public key k = y B x A mod p = y A x B mod p = a x A * x B mod p system constants: p: prime number, a: integer
10 © Ravi Sandhu DIFFIE-HELLMAN KEY ESTABLISHMENT security depends on difficulty of computing x given y=a x mod p called the discrete logarithm problem
11 © Ravi Sandhu MAN IN THE MIDDLE ATTACK A A C C B B
12 © Ravi Sandhu CURRENT GENERATION PUBLIC KEY SYSTEMS RSA (Rivest, Shamir and Adelman) the only one to provide digital signature and encryption using the same public-private key pair security based on factoring ElGamal Encryption public-key encryption only security based on digital logarithm DSA signatures public-key signature only one of many variants of ElGamal signature security based on digital logarithm
13 © Ravi Sandhu CURRENT GENERATION PUBLIC KEY SYSTEMS DH (Diffie-Hellman) secret key agreement only security based on digital logarithm ECC (Elliptic curve cryptography) security based on digital logarithm in elliptic curve field uses analogs of ElGamal encryption DH key agreement DSA digital signature
14 © Ravi Sandhu ELLIPTIC CURVE CRYPTOGRAPHY mathematics is more complicated than RSA or Diffie-Hellman elliptic curves have been studied for over one hundred years computation is done in a group defined by an elliptic curve
15 © Ravi Sandhu ELLIPTIC CURVE CRYPTOGRAPHY 160 bit ECC public key is claimed to be as secure as 1024 bit RSA or Diffie-Hellman key good for small hardware implementations such as smart cards
16 © Ravi Sandhu ELLIPTIC CURVE CRYPTOGRAPHY ECDSA: Elliptic Curve digital signature algorithm based on NIST Digital Signature Standard ECSVA: Elliptic Curve key agreement algorithm based on Diffie-Hellman ECES: Elliptic Curve encryption algorithm based on El-Gamal
17 © Ravi Sandhu PKCS STANDARDS de facto standards initiated by RSA Data Inc.
18 © Ravi Sandhu MESSAGE DIGEST message digest algorithm original message no practical limit to size message digest 128 bit/160 bit easyhard
19 © Ravi Sandhu MESSAGE DIGEST for performance reasons sign the message digest not the message one way function m=H(M) is easy to compute M=H -1 (m) is hard to compute
20 © Ravi Sandhu DESIRED CHARACTERISTICS weak hash function difficult to find M' such that H(M')=H(M) given M, m=H(M) try messages at random to find M with H(M)=m 2 k trials on average, k=80 to be safe
21 © Ravi Sandhu DESIRED CHARACTERISTICS strong hash function difficult to find any two M and M' such that H(M')=H(M) try pairs of messages at random to find M and M such that H(M)=H(M) 2 k/2 trials on average, k=128 to be safe k=160 is better
22 © Ravi Sandhu CURRENT GENERATION MESSAGE DIGEST ALGORITHMS MD5 (Message Digest 5) 128 bit message digest falling out of favor SHA (Secure Hash Algorithm) 160 bit message digest slightly slower than MD5 but more secure
Chapter 3 Public Key Cryptography and Message authentication.
(ENCODING AND DECODING TECHNIQUES)
Symmetric Message Authentication Codes Prof. Ravi Sandhu.
Asymmetric Encryption Prof. Ravi Sandhu. 2 © Ravi Sandhu PUBLIC KEY ENCRYPTION Encryption Algorithm E Decryption Algorithm D Plain- text Plain- text Ciphertext.
PKI Introduction Ravi Sandhu 2 © Ravi Sandhu 2002 CRYPTOGRAPHIC TECHNOLOGY PROS AND CONS SECRET KEY SYMMETRIC KEY Faster Not scalable No digital signatures.
Public Key Cryptography INFSCI 1075: Network Security – Spring 2013 Amir Masoumzadeh.
Data Security 1 El_Gamal Cryptography. Data Security2 Introduction El_Gamal is a public-key cryptosystem technique El_Gamal is a public-key cryptosystem.
CSE331: Introduction to Networks and Security Lecture 19 Fall 2002.
Public Key Encryption Algorithm
Web Security for Network and System Administrators1 Chapter 4 Encryption.
Attacks on Digital Signature Algorithm: RSA
BY MUKTADIUR RAHMAN MAY 06, 2010 INTERODUCTION TO CRYPTOGRAPHY.
CSE331: Introduction to Networks and Security Lecture 18 Fall 2002.
CS470, A.SelcukElGamal Cryptosystem1 ElGamal Cryptosystem and variants CS 470 Introduction to Applied Cryptography Instructor: Ali Aydin Selcuk.
Public Key Cryptography
Public Encryption: RSA
Cryptography1 CPSC 3730 Cryptography Chapter 13 Digital Signature Standard (DSS)
Chapter 3 Encryption Algorithms & Systems (Part C)
Fall 2010/Lecture 311 CS 426 (Fall 2010) Public Key Encryption and Digital Signatures.
8: Network Security8-1 Symmetric key cryptography symmetric key crypto: Bob and Alice share know same (symmetric) key: K r e.g., key is knowing substitution.
© 2018 SlidePlayer.com Inc. All rights reserved.