1 Cryptography NOTES. 2 Secret Key Cryptography Single key used to encrypt and decrypt. Key must be known by both parties. Assuming we live in a hostile.

Slides:

Advertisements

Similar presentations

1 Key Exchange Solutions Diffie-Hellman Protocol Needham Schroeder Protocol X.509 Certification.

Advertisements

Last Class: The Problem BobAlice Eve Private Message Eavesdropping.

Internet and Intranet Protocols and Applications Lecture 9a: Secure Sockets Layer (SSL) March, 2004 Arthur Goldberg Computer Science Department New York.

1 Lecture 17: SSL/TLS history, architecture basic handshake session initiation/resumption key computation negotiating cipher suites application: SET.

Cryptography and Network Security

SSL CS772 Fall Secure Socket layer Design Goals: SSLv2) SSL should work well with the main web protocols such as HTTP. Confidentiality is the top.

Security S Wireless Personal, Local, Metropolitan, and Wide Area Networks1 Contents Security requirements Public key cryptography Key agreement/transport.

Topic 8: Secure communication in mobile devices. Choice of secure communication protocols, leveraging SSL for remote authentication and using HTTPS for.

Netprog: Cryptgraphy1 Cryptography Reference: Network Security PRIVATE Communication in a PUBLIC World. by Kaufman, Perlman & Speciner.

1 Pertemuan 12 Authentication, Encryption, Digital Payments, and Digital Money Matakuliah: M0284/Teknologi & Infrastruktur E-Business Tahun: 2005 Versi:

Mar 19, 2002Mårten Trolin1 This lecture On the assignment Certificates and key management SSL/TLS –Introduction –Phases –Commands.

15-1 Last time Internet Application Security and Privacy Public-key encryption Integrity.

Mar 12, 2002Mårten Trolin1 This lecture Diffie-Hellman key agreement Authentication Certificates Certificate Authorities SSL/TLS.

Public-key Cryptography Montclair State University CMPT 109 J.W. Benham Spring, 1998.

ECOMMERCE TECHNOLOGY SUMMER 2002 COPYRIGHT © 2002 MICHAEL I. SHAMOS Cryptographic Security.

1 Encryption What is EncryptionWhat is Encryption Types of EncryptionTypes of Encryption.

Apr 22, 2003Mårten Trolin1 Agenda Course high-lights – Symmetric and asymmetric cryptography – Digital signatures and MACs – Certificates – Protocols Interactive.

Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger.

8-1 What is network security? Confidentiality: only sender, intended receiver should “understand” message contents m sender encrypts message m receiver.

Netprog: Security1 Security Terminology Traditional Unix Security TCP Wrapper Cryptography Kerberos.

How cryptography is used to secure web services Josh Benaloh Cryptographer Microsoft Research.

Chapter Extension 23 SSL/TLS and //https © 2008 Pearson Prentice Hall, Experiencing MIS, David Kroenke.

Network Security – Part 2 V.T. Raja, Ph.D., Oregon State University.

Lecture 24 Cryptography CPE 401 / 601 Computer Network Systems slides are modified from Jim Kurose and Keith Ross and Dave Hollinger.

Introduction to Cryptography

Secure Systems Research Group - FAU Patterns for Digital Signature using hashing Presented by Keiko Hashizume.

1 Cryptography Basics. 2 Cryptography Basic terminologies Symmetric key encryption Asymmetric key encryption Public Key Infrastructure Digital Certificates.

Pretty Good Privacy by Philip Zimmerman presented by: Chris Ward.

How HTTPS Works J. David Giese. Hyper Text Transfer Protocol BrowserHTTP Server GET / HTTP/1.1 HOST: edge-effect.github.io HEADERS BODY HTTP/ OK.

May 2002Patroklos Argyroudis1 A crash course in cryptography and network security Patroklos Argyroudis CITY Liberal Studies.

8-1Network Security Chapter 8 roadmap 8.1 What is network security? 8.2 Principles of cryptography 8.3 Message integrity, authentication.

Network Security – Part 2 (Continued) Lecture Notes for May 8, 2006 V.T. Raja, Ph.D., Oregon State University.

SSL / TLS in ITDS Arun Vishwanathan 23 rd Dec 2003.

10/1/2015 9:38:06 AM1AIIS. OUTLINE Introduction Goals In Cryptography Secrete Key Cryptography Public Key Cryptograpgy Digital Signatures 2 10/1/2015.

Cryptography, Authentication and Digital Signatures

Security Protocols and E-commerce University of Palestine Eng. Wisam Zaqoot April 2010 ITSS 4201 Internet Insurance and Information Hiding.

How cryptography is used to secure web services Josh Benaloh Cryptographer Microsoft Research.

David Evans CS200: Computer Science University of Virginia Computer Science Class 36: Public-Key Cryptography If you want.

Introduction1-1 Data Communications and Computer Networks Chapter 6 CS 3830 Lecture 31 Omar Meqdadi Department of Computer Science and Software Engineering.

ITIS 1210 Introduction to Web-Based Information Systems Chapter 50 Cryptography, Privacy, and Digital Certificates.

Digital Envelopes, Secure Socket Layer and Digital Certificates By: Anthony and James.

23-1 Last time □ P2P □ Security ♦ Intro ♦ Principles of cryptography.

Internet Security. 2 PGP is a security technology which allows us to send that is authenticated and/or encrypted. Authentication confirms the identity.

1 Security Protocols in the Internet Source: Chapter 31 Data Communications & Networking Forouzan Third Edition.

Internet-security.ppt-1 ( ) 2000 © Maximilian Riegel Maximilian Riegel Kommunikationsnetz Franken e.V. Internet Security Putting together the.

Advanced Database Course (ESED5204) Eng. Hanan Alyazji University of Palestine Software Engineering Department.

Upper OSI Layers Natawut Nupairoj, Ph.D. Department of Computer Engineering Chulalongkorn University.

8-1 Chapter 8 Security Computer Networking: A Top Down Approach 6 th edition Jim Kurose, Keith Ross Addison-Wesley March 2012 part 2: Message integrity.

Digital Signatures, Message Digest and Authentication Week-9.

Cryptography: Digital Signatures Message Digests Authentication

Encryption. Introduction The incredible growth of the Internet has excited businesses and consumers alike with its promise of changing the way we live.

TCP/IP Protocol Suite 1 Chapter 30 Security Credit: most slides from Forouzan, TCP/IP protocol suit.

Network Security Continued. Digital Signature You want to sign a document. Three conditions. – 1. The receiver can verify the identity of the sender.

Public Key Encryption, Secure WWW Transactions & Digital Signatures.

Computer and Network Security - Message Digests, Kerberos, PKI –

Mar 28, 2003Mårten Trolin1 This lecture Certificates and key management Non-interactive protocols –PGP SSL/TLS –Introduction –Phases –Commands.

Cryptography – Test Review

Cryptography Reference: Network Security

Cryptography Reference: Network Security

Secure Sockets Layer (SSL)

Public-key Cryptography

12 E-Commerce Overview.

The Secure Sockets Layer (SSL) Protocol

Cryptography Reference: Network Security

Lecture 10: Network Security.

Chapter 8 roadmap 8.1 What is network security?

Presentation transcript:

1 Cryptography NOTES

2 Secret Key Cryptography Single key used to encrypt and decrypt. Key must be known by both parties. Assuming we live in a hostile environment (otherwise - why the need for cryptography?), it may be hard to share a secret key.

3 Public Key Cryptography (a.k.a. asymmetric cryptography) Relatively new field (as far as we know, the NSA is not talking). Each entity has 2 keys: –private key (a secret) –public key (well known).

4 Private keys are used for decrypting. Public keys are used for encrypting. encryption plaintextciphertext public key decryption ciphertext plaintext private key Using Keys

5 Digital Signature Public key cryptography is also used to provide digital signatures. signing plaintextsigned message private key verification signed message plaintext public key

6 Transmitting over an insecure channel. Alice wants to send Bob a private message. A public is Alice’s public key. A private is Alice’s private key. B public is Bob’s public key. B private is Bob’s private key.

7 Hello Bob, Wanna get together? AliceBob encrypt using B public decrypt using B private

8 OK Alice, Your place or mine? AliceBob decrypt using A private encrypt using A public

9 Bob’s Dilemma Nobody can read the message from Alice, but anyone could produce it. How does Bob know that the message was really sent from Alice? Bob may be comforted to know that only Alice can read his reply.

10 Alice can sign her message! Alice can create a digital signature and prove she sent the message (or someone with knowledge of her private key). The signature can be a message digest encrypted with A private.

11 Message Digest Also known as “hash function” or “one- way transformation”. Transforms a message of any length and computes a fixed length string. We want it to be hard to guess what the message was given only the digest. –Guessing is always possible.

12 Alice’s Signature Alice feeds her original message through a hash function and encrypts the message digest with A private. Bob can decrypt the message digest using A public. Bob can compute the message digest himself. If the 2 message digests are identical, Bob knows Alice sent the message.

13 AliceBob Sign with A private check signature using A public encrypt using B public decrypt using B private Revised Scheme

14 Why the digest? Alice could just encrypt her name, and then Bob could decrypt it with A public. Why wouldn’t this be sufficient?

15 Implications Suppose Alice denies she sent the message? Bob can prove that only someone with Alice’s key could have produced the message.

16 Another possible problem Suppose Bill receives a message from Alice including a digital signature. “meet me at the library tonight” Bill sends the same message to Joe so that it looks like the message came from Alice. Bill includes the digital signature from the message Alice sent to him. Joe is convinced Alice sent the message!

17 Solution? Always start your messages with: –Dear Bill, Create a digest from the encrypted message and sign that digest. There are many other schemes as well.

18 Speed Secret key encryption/decryption algorithms are much faster than public key algorithms. Many times a combination is used: –use public key cryptography to share a secret key. –use the secret key to encrypt the bulk of the communication.

19 Secure Protocols There are a growing number of applications for secure protocols: – –electronic commerce –electronic voting –homework submission

20 Secure Protocols Many application protocols include the use of cryptography as part of the application level protocol. –The cryptographic scheme employed is part of the protocol. –If stronger cryptographic tools become available we need to change the protocol.

21 SSL and TLS Secure Sockets Layer (SSL) is a different approach - a new layer is added that provides a secure channel over a TCP only link. TLS is Transport Layer Security (IETF standard based on SSL).

22 SSL layer Application SSL TCP IP Application SSL TCP IP

23 Advantages of SSL/TLS Independent of application layer Includes support for negotiated encryption techniques. –easy to add new techniques. Possible to switch encryption algorithms in the middle of a session.

24 HTTPS Usage HTTPS is HTTP running over SSL. –used for most secure web transactions. –HTTPS server usually runs on port 443. –Include notion of verification of server via a certificate. –Central trusted source of certificates.