Cryptography: Practice JMU Cyber Defense Boot Camp
|
|
|
- Chad Dixon
- 5 years ago
- Views:
Transcription
1 Cryptography: Practice 2013 JMU Cyber Defense Boot Camp
2 Prerequisites This unit assumes that you have already known Symmetric-key encryption Public-key encryption Digital signature Digital certificates 2013 Summer Camp 2
3 Step 0 Use Firefox to log into your vcenter server and find your Windows 2003 VM Use the WLAN and Crypto Security VM snapshot 2013 Summer Camp 3
4 Organization Practice Truecrypt GPG 2013 Summer Camp 4
5 Road Map Practice Truecrypt GPG 2013 Summer Camp 5
6 TrueCrypt Open-source disk encryption software Not just encrypting single files, but the whole disk Supports Windows, Linux, and Mac OS Has been used by bad people to encrypt laptops and external hard disks 2013 Summer Camp 6
7 Step 1 Download and install NOTE: TrueCrypt has already been installed on your Windows 2003 VM under the WLAN and Crypto Security VM snapshot 2013 Summer Camp 7
8 Step 2: Run TrueCrypt Start > All Programs > TrueCrypt > TrueCrypt (You can also run it directly from a shortcut on your Desktop) 2013 Summer Camp 8
9 Step 2 Create a virtual encrypted disk (called file containers) Put all of your critical files there 2013 Summer Camp 9
10 2013 Summer Camp 10
11 CREDITS: some of these screen snapshots are from Summer Camp 11
12 2013 Summer Camp 12
13 The Location of the Virtual Encrypted Disk 2013 Summer Camp 13
14 2013 Summer Camp 14
15 2013 Summer Camp 15
16 AES is a symmetric encryption algorithm standard Select SHA-512, a US crypto hash standard 2013 Summer Camp 16
17 The size of your virtual encrypted disk; Choose 2G if you like 2013 Summer Camp 17
18 This is the password used to protect your virtual disk You can generate a random key and use it to protect your virtual disk. Let s not do this now 2013 Summer Camp 18
19 Move your mouse around for 10 seconds to generate some random bits 2013 Summer Camp 19
20 2013 Summer Camp 20
21 Your virtual disk will be mounted as M: 2013 Summer Camp 21
22 2013 Summer Camp 22
23 select your virtual disk file 2013 Summer Camp 23
24 select an available drive letter first 2013 Summer Camp 24
25 This is the password that you set earlier 2013 Summer Camp 25
26 2013 Summer Camp 26
27 You will have a new M: drive 2013 Summer Camp 27
28 You can copy your security-critical files to/from your M: drive 2013 Summer Camp 28
29 Security-critical Files? Create a security-critical text file, finance.txt Save the following information to it your SSN and credit numbers in it Your online banking account information Your utility bill accounts information Your other important digital stuffs Save it to M: drive 2013 Summer Camp 29
30 At this moment, your files on M: are in the clear 2013 Summer Camp 30
31 You can dismount your M: drive to protect it 2013 Summer Camp 31
32 Exercise Create a TrueCrypt virtual disk (filename: your_first_name-last_name) Create a text file, finance.txt, and save it to your virtual disk Dismount your virtual disk Examine file your_first_name-last_name to see whether you can find any information about finance.txt Copy your_first_name-last_name to c:\tmp Mount c:\tmp\ your_first_name-last_name (the new copy) Open finance.txt 2013 Summer Camp 32
33 Is It Really Secure? You can examine your virtual disk file If a hacker has stolen your virtual disk file, he/she will not be able to see your critical files 2013 Summer Camp 33
34 Do You Really Know What You are Doing? Warning If you pick a strong password and forget it, you will NOT be able to recover any data on the virtual disk Probably nobody will be able to help you Know your risk! 2013 Summer Camp 34
35 Road Map Practice Truecrypt GPG 2013 Summer Camp 35
36 Cryptography Encryption Public-key cryptography can be used for digital signature The digital counterpart of hand-written signature 2013 Summer Camp 36
37 Digital Signature Alice uses her private key to digitally sign a message (a bit string) Everybody can use Alice s public key to verify Alice s digital signature Algorithm buzzwords RSA digital signature Digital Signature Standard (DSS) Elliptic-curve digital signature algorithm (ECDSA) (Do not confuse digital signature with signature in MS Outlook!) 2013 Summer Camp 37
38 signature vs. Digital Signature signature Xunhua Wang, PhD Department of Computer Science James Madison University Tel: This is not secure! Anybody can change it Digital signature Summer Camp 38
39 What if I Want to Encryption/sign a single file/ ? GNU Privacy Guard (GPG) Windows version Gpg4win Summer Camp 39
40 Step 1 Download Gpg4win and install it on your Windows 2003 VM NOTE: Gpg4win has already been installed on your Windows 2003 VM under the WLAN and Crypto Security VM snapshot 2013 Summer Camp 40
41 Step 2 Run Start -> All Programs -> Gpg4win -> Kleopatra (You can also run it directly from a shortcut on your Desktop) 2013 Summer Camp 41
42 File -> New Certificates 2013 Summer Camp 42
43 Choose this one to generate your own public/private key pair 2013 Summer Camp 43
44 Enter the required information 2013 Summer Camp 44
45 Choose the algorithm The purposes of your key pair 2013 Summer Camp 45
46 Choose a password to protect your private key 2013 Summer Camp 46
47 Click this to back up your private key to a file (see next slide) Everything is cool 2013 Summer Camp 47
48 This is your private key in a file This is your private key, it is supposed to be secret: do not lose it or send it to your friend 2013 Summer Camp 48
49 This is my public key; I can export it to a file and it to Bob Right click on this to export it to a file 2013 Summer Camp 49
50 This is my public key in a file I can it to my friends 2013 Summer Camp 50
51 Exercise #1 Export your public key to a file and it to the student next to you After receiving a public key from your classmate, import it to your Gpg4win (see next slide) 2013 Summer Camp 51
52 Click File -> Import Certificates to import the public key received from your classmate 2013 Summer Camp 52
53 Now, I Want to digitally Sign a file and Send it to My Friend This is the file to be digitally signed (testfile.txt) 2013 Summer Camp 53
54 Click File -> Sign/Encrypt Files 2013 Summer Camp 54
55 You have three choices 2013 Summer Camp 55
56 I want to digitally sign the file this time 2013 Summer Camp 56
57 Choose the private key to digitally sign the file 2013 Summer Camp 57
58 My private key is protected by a password 2013 Summer Camp 58
59 Everything is cool So, where is the digital signature for my file? 2013 Summer Camp 59
60 My file is testfile.txt and the signature file is called testfile.txt.asc 2013 Summer Camp 60
61 Next, I both my file and the signature file to Bob (my classmate) 2013 Summer Camp 61
62 Bob: Click File -> Decrypt/Verify Files Bob selects the signature file received from me 2013 Summer Camp 62
63 Bob: 2013 Summer Camp 63
64 It tells Bob that this file is really from me, not from an attacker 2013 Summer Camp 64
65 Exercise #2 Create a text file your_first_name-last_namegpg4win.txt and digitally sign it your_first_name-last_name-gpg4win.txt and the digital signature file to your classmate After receiving the files from your classmate, try to digitally verify them 2013 Summer Camp 65
66 What if I want to digitally sign An ? Not a file GnuPG for Outlook (GpgOL) Use with Microsoft Outlook mail client 2013 Summer Camp 66
67 Summary Practice Truecrypt GPG 2013 Summer Camp 67
68 One More Note You can encrypt a MS Word file with a password MS Word allows you to do this a MS Excel file with a password MS Excel allows you to do this a PDF file with a password Adobe Acrobat allows you to do this 2013 Summer Camp 68
69 GPG on Unix/Linux (1/5) gpg --gen-key User ID: real name, address, comment Passphrase for your private key /home/user/.gnupg/trustdb.gpg Revocation certificate gpg a --output wangxx@jmu.edu.asc.revoke --gen-revoke wangxx@jmu.edu Reason: 0 Publicizing your key gpg ---output pubkey.wangxx@jmu.edu.gpg --export wangxx gpg ---output pubkey.wangxx@jmu.edu.gpg.asc --armor --export wangxx gpg --keyserver subkeys.gpg.net --send-keys wangxx@jmu.edu 2013 Summer Camp 69
70 On Linux GPG is also available on Linux 2013 Summer Camp 70
71 GPG on Unix/Linux (2/5) keyserver x-hkp://subkeys.pgp.net Add keys to your keyring (public vs. private) gpg --recv-keys E68C49BC gpg --list-keys gpg --list-secret-keys gpg --list-keys gpg --import wang.asc 2013 Summer Camp 71
72 GPG on Unix/Linux (3/5) Signing a key gpg --fingerprint wangxx@jmu.edu gpg --sign-key E2F41133 Viewing key signatures gpg --list-sigs E2F41133 Export gpg --output wangxx.asc --armor --export E2F41133 Pushing signatures to keyservers gpg --send-keys E2F41133 Updating keys gpg --refresh-keys 2013 Summer Camp 72
73 GPG on Unix/Linux (4/5) Deleting keys gpg --delete-keys E2F41133 gpg --update-trustdb 2013 Summer Camp 73
74 GPG on Unix/Linux (5/5) To digitally sign a file gpg s filename To verify a digital signature gpg --verify filenameofsignature Encrypt data gpg e filename Decrypt data gpg --decrypt msg.asc 2013 Summer Camp 74
ECE646 Fall Lab 1: Pretty Good Privacy. Instruction
ECE646 Fall 2012 Lab 1: Pretty Good Privacy Instruction PLEASE READ THE FOLLOWING INSTRUCTIONS CAREFULLY: 1. You are expected to address all questions listed in this document in your final report. 2. All
ECE 646 Fall Lab 1: Pretty Good Privacy Setup
ECE 646 Fall 2017 Lab 1: Pretty Good Privacy Setup This setup should be completed before the lecture on Tuesday, October 3. Please read the general information about GNU Privacy Guard from Wikipedia available
Security PGP / Pretty Good Privacy. SANOGXXX July, 2017 Gurgaon, Haryana, India
Email Security PGP / Pretty Good Privacy SANOGXXX 10-18 July, 2017 Gurgaon, Haryana, India Issue Date: [31-12-2015] Revision: [V.1] Security issues for E-mail Confidentiality Network admin can read your
ECE646 Fall Lab 1: Pretty Good Privacy. Instruction
ECE646 Fall 2015 Lab 1: Pretty Good Privacy Instruction PLEASE READ THE FOLLOWING INSTRUCTIONS CAREFULLY: 1. You are expected to address all questions listed in this document in your final report. 2. All
Lecture 30. Cryptography. Symmetric Key Cryptography. Key Exchange. Advanced Encryption Standard (AES) DES. Security April 11, 2005
Lecture 30 Security April 11, 2005 Cryptography K A ciphertext Figure 7.3 goes here K B symmetric-key crypto: sender, receiver keys identical public-key crypto: encrypt key public, decrypt key secret Symmetric
Learn PGP. SIPB Cluedump, 19 October Anish Athalye (aathalye), Merry Mou (mmou), Adam Suhl (asuhl) 1 / 22
Learn PGP SIPB Cluedump, 19 October 2016 Anish Athalye (aathalye), Merry Mou (mmou), Adam Suhl (asuhl) 1 / 22 2 / 22 Overview 1. Theore cal PGP / Intro to Security 2. Prac cal PGP Installa on, Usage, Demo
2013 Summer Camp: Wireless LAN Security Exercises JMU Cyber Defense Boot Camp
2013 Summer Camp: Wireless LAN Security Exercises 2013 JMU Cyber Defense Boot Camp Questions Have you used a wireless local area network before? At home? At work? Have you configured a wireless AP before?
Lab: Securing with PGP
Objectives Understand the concept of public keys, signing, and encrypting email with PGP. Background GNUPG (or GNU Privacy guard) is a free implementation of the OpenPGP standard (RFC 4880) as a tool for
Software Vulnerability Assessment & Secure Storage
Software Vulnerability Assessment & Secure Storage 1 Software Vulnerability Assessment Vulnerability assessment is the process of identifying flaws that reside in an OS, application software or devices
FRCC Secure Transfer & Storage Infrastructure. Training for new data transfer process
FRCC Secure Transfer & Storage Infrastructure Training for new data transfer process Training Objects Understand the changes in regards to the data transfer process using PKI Installation Key management
Public Key Cryptography, OpenPGP, and Enigmail. 31/5/ Geek Girls Carrffots GVA
Public Key Cryptography, OpenPGP, and Enigmail Cryptography is the art and science of transforming (encrypting) a message so only the intended recipient can read it Symmetric Cryptography shared secret
Encryption 2. Tom Chothia Computer Security: Lecture 3
Encryption 2 Tom Chothia Computer Security: Lecture 3 This Lecture Counter Mode (CTR) enryption Diffie Helleman key exchange Public Key Encryption RSA Signing Combining public and symmetric key encryption
LAB :: PGP (Pretty Good Privacy)
LAB :: PGP (Pretty Good Privacy) GnuPG : GnuPG forms the heart of Gpg4win the actual encryption software. Kleopatra : The central certificate administration of Gpg4win, which ensures uniform user navigation
Cryptography. Cryptography is everywhere. German Lorenz cipher machine
Crypto 101 Cryptography Cryptography is everywhere German Lorenz cipher machine 2 Cryptography Cryptography deals with creating documents that can be shared secretly over public communication channels
Mailvelope for Encryption
Mailvelope for Email Encryption Steve Revilak https://masspirates.org/blog/category/cryptoparty/ Cryptoparty @ Somerville Public Library July 15, 2016 1 / 15 What is Mailvelope Mailvelope is a browser
9/30/2016. Cryptography Basics. Outline. Encryption/Decryption. Cryptanalysis. Caesar Cipher. Mono-Alphabetic Ciphers
Cryptography Basics IT443 Network Security Administration Slides courtesy of Bo Sheng Basic concepts in cryptography systems Secret cryptography Public cryptography 1 2 Encryption/Decryption Cryptanalysis
Security+ Guide to Network Security Fundamentals, Third Edition. Chapter 11 Basic Cryptography
Security+ Guide to Network Security Fundamentals, Third Edition Chapter 11 Basic Cryptography Objectives Define cryptography Describe hashing List the basic symmetric cryptographic algorithms 2 Objectives
Cryptography Basics. IT443 Network Security Administration Slides courtesy of Bo Sheng
Cryptography Basics IT443 Network Security Administration Slides courtesy of Bo Sheng 1 Outline Basic concepts in cryptography systems Secret key cryptography Public key cryptography Hash functions 2 Encryption/Decryption
Cryptographic Systems
CPSC 426/526 Cryptographic Systems Ennan Zhai Computer Science Department Yale University Recall: Lec-10 In lec-10, we learned: - Consistency models - Two-phase commit - Consensus - Paxos Lecture Roadmap
Public-key Cryptography: Theory and Practice
Public-key Cryptography Theory and Practice Department of Computer Science and Engineering Indian Institute of Technology Kharagpur Chapter 1: Overview What is Cryptography? Cryptography is the study of
18-642: Cryptography 11/15/ Philip Koopman
18-642: Cryptography 11/15/2017 Cryptography Overview Anti-Patterns for Cryptography Using a home-made cryptographic algorithm Using private key when public key is required Not considering key distribution
Diffie-Hellman. Part 1 Cryptography 136
Diffie-Hellman Part 1 Cryptography 136 Diffie-Hellman Invented by Williamson (GCHQ) and, independently, by D and H (Stanford) A key exchange algorithm o Used to establish a shared symmetric key Not for
Due: October 8, 2013: 7.30 PM
Jackson State University Department of Computer Science CSC 437-01/539-01 Computer Security Fall 2013 Instructor: Dr. Natarajan Meghanathan Lab Project # 1: Lab Project on using PGP GNU Privacy Guard (GPG)
Other Topics in Cryptography. Truong Tuan Anh
Other Topics in Cryptography Truong Tuan Anh 2 Outline Public-key cryptosystem Cryptographic hash functions Signature schemes Public-Key Cryptography Truong Tuan Anh CSE-HCMUT 4 Outline Public-key cryptosystem
Using Cryptography CMSC 414. October 16, 2017
Using Cryptography CMSC 414 October 16, 2017 Digital Certificates Recall: K pub = (n, e) This is an RSA public key How do we know who this is for? Need to bind identity to a public key We can do this using
FRCC Secure Data Transfer. Users Guide V1.5
FRCC Secure Data Transfer Users Guide V1.5 Table of Contents I. Introduction... 2 II. Part 1 - Software Installation... 3 III. Part 2 - Creating Your PKI Certificate... 7 IV. Part 3 - Importing FRCC Public
GPG, SSH, and Identity for Beginners
GPG, SSH, and Identity for Beginners GUADEC Strasbourg, July 2014 Federico Mena Quintero federico@gnome.org 263F 590F 7E0F E1CB 3EA2 74B0 1676 37EB 6FB8 DCCE DEMO Crypto is Hard(tm) Be diligent...... even
Distributed Systems. 26. Cryptographic Systems: An Introduction. Paul Krzyzanowski. Rutgers University. Fall 2015
Distributed Systems 26. Cryptographic Systems: An Introduction Paul Krzyzanowski Rutgers University Fall 2015 1 Cryptography Security Cryptography may be a component of a secure system Adding cryptography
===============================================================================
We have looked at how to use public key crypto (mixed with just the right amount of trust) for a website to authenticate itself to a user's browser. What about when Alice needs to authenticate herself
10/1/2015. Authentication. Outline. Authentication. Authentication Mechanisms. Authentication Mechanisms. Authentication Mechanisms
Authentication IT443 Network Security Administration Instructor: Bo Sheng Authentication Mechanisms Key Distribution Center and Certificate Authorities Session Key 1 2 Authentication Authentication is
INFORMATION SECURITY - PRACTICAL ASSESSMENT - TP3 - CRYPTOGRAPHY AND APPLICATIONS. GRENOBLE INP ENSIMAG
INFORMATION SECURITY - PRACTICAL ASSESSMENT - TP3 - CRYPTOGRAPHY AND APPLICATIONS GRENOBLE INP ENSIMAG http://www.ensimag.fr COMPUTER SCIENCE 3RD YEAR SIF-LOAD - 1ST SEMESTER, 2011 Lecturers: Fabien Duchene
Sharing Secrets using Encryption Facility - Handson
Sharing Secrets using Encryption Facility - Handson Lab Steven R. Hart IBM March 12, 2014 Session Number 14963 Encryption Facility for z/os Encryption Facility for z/os is a host based software solution
CS 161 Computer Security
Popa & Wagner Spring 2016 CS 161 Computer Security Midterm 2 Print your name:, (last) (first) I am aware of the Berkeley Campus Code of Student Conduct and acknowledge that academic misconduct will be
Cryptography (Overview)
Cryptography (Overview) Some history Caesar cipher, rot13 substitution ciphers, etc. Enigma (Turing) Modern secret key cryptography DES, AES Public key cryptography RSA, digital signatures Cryptography
Understanding Cryptography A Textbook for Students and Practitioners by Christof Paar and Jan Pelzl. Chapter 6 Introduction to Public-Key Cryptography
Understanding Cryptography A Textbook for Students and Practitioners by Christof Paar and Jan Pelzl www.crypto-textbook.com Chapter 6 Introduction to Public-Key Cryptography ver. November 18, 2010 These
Install and setup TrueCrypt
Install and setup TrueCrypt Install and setup TrueCrypt This guide is for organisations and individuals who wish to use TrueCrypt to secure their computer(s) and/or portable USB drives. It explains how
Public Key Infrastructures
Public Key Infrastructures Trust Models Cryptography and Computer Algebra Prof. Johannes Buchmann Dr. Johannes Braun We trust certificates because we trust the system(s). Direct trust Web of trust Hierarchical
Kurose & Ross, Chapters (5 th ed.)
Kurose & Ross, Chapters 8.2-8.3 (5 th ed.) Slides adapted from: J. Kurose & K. Ross \ Computer Networking: A Top Down Approach (5 th ed.) Addison-Wesley, April 2009. Copyright 1996-2010, J.F Kurose and
Test Conditions. Closed book, closed notes, no calculator, no laptop just brains 75 minutes. Steven M. Bellovin October 19,
Test Conditions Closed book, closed notes, no calculator, no laptop just brains 75 minutes Steven M. Bellovin October 19, 2005 1 Form 8 questions I m not asking you to write programs or even pseudo-code
Lecture 2 Applied Cryptography (Part 2)
Lecture 2 Applied Cryptography (Part 2) Patrick P. C. Lee Tsinghua Summer Course 2010 2-1 Roadmap Number theory Public key cryptography RSA Diffie-Hellman DSA Certificates Tsinghua Summer Course 2010 2-2
Chapter 8 Security. Computer Networking: A Top Down Approach. 6 th edition Jim Kurose, Keith Ross Addison-Wesley March 2012
Chapter 8 Security A note on the use of these ppt slides: We re making these slides freely available to all (faculty, students, readers). They re in PowerPoint form so you see the animations; and can add,
1 Start Ubuntu Privacy Remix
Table of Contents 1 Start Ubuntu Privacy Remix...1 2 Working with USB flash drives and diskettes...2 3 Open extended TrueCrypt volume...3 4 Open normal TrueCrypt Volume...4 5 Open and store data in the
PUBLIC KEY CRYPTO WITH APPLICATIONS
PUBLIC KEY CRYPTO WITH APPLICATIONS Marc SCHAEFER 19th june 2002 OBL Bern: Public Key Cryptography Public Key Crypto with applications 1 Programme The general problem The available tools The concepts The
PGP Key Verification. Version 1.1, 08/26/2002. Stephen Gill Published: 08/26/2002
PGP Key Verification Version 1.1, 08/26/2002 Stephen Gill E-mail: gillsr@cymru.com Published: 08/26/2002 Contents Credits Introduction... 2 Instructions... 2 Step 1: Retrieve... 3 Step 2: Fingerprint...
Key Protection for Endpoint, Cloud and Data Center
Key Protection for Endpoint, Cloud and Data Center ENCRYPTION IS ONLY AS SECURE AS ITS LEAST SECURE KEY Encryption is undoubtedly one of the pillars of information security. It is used everywhere today:
Public-Key Infrastructure NETS E2008
Public-Key Infrastructure NETS E2008 Many slides from Vitaly Shmatikov, UT Austin slide 1 Authenticity of Public Keys? private key Alice Bob public key Problem: How does Alice know that the public key
Secure All The Things Using a Yubikey for 2-Factor on (Almost) All Your Accounts. Jesse Stengel The University of Arizona
Secure All The Things Using a Yubikey for 2-Factor on (Almost) All Your Accounts Jesse Stengel The University of Arizona What is a Yubikey? Yubikeys are small USB devices made by Yubico for doing various
Encryption. INST 346, Section 0201 April 3, 2018
Encryption INST 346, Section 0201 April 3, 2018 Goals for Today Symmetric Key Encryption Public Key Encryption Certificate Authorities Secure Sockets Layer Simple encryption scheme substitution cipher:
UNIT - IV Cryptographic Hash Function 31.1
UNIT - IV Cryptographic Hash Function 31.1 31-11 SECURITY SERVICES Network security can provide five services. Four of these services are related to the message exchanged using the network. The fifth service
APNIC elearning: Cryptography Basics
APNIC elearning: Cryptography Basics 27 MAY 2015 03:00 PM AEST Brisbane (UTC+10) Issue Date: Revision: Introduction Presenter Sheryl Hermoso Training Officer sheryl@apnic.net Specialties: Network Security
Cryptographic Protocols 1
Cryptographic Protocols 1 Luke Anderson luke@lukeanderson.com.au 5 th May 2017 University Of Sydney Overview 1. Crypto-Bulletin 2. Problem with Diffie-Hellman 2.1 Session Hijacking 2.2 Encrypted Key Exchange
Digital Signatures. Public-Key Signatures. Arbitrated Signatures. Digital Signatures With Encryption. Terminology. Message Authentication Code (MAC)
Message Authentication Code (MAC) Key-dependent one-way hash function Only someone with a correct key can verify the hash value Easy way to turn one-way hash function into MAC is to encrypt hash value
PKI Credentialing Handbook
PKI Credentialing Handbook Contents Introduction...3 Dissecting PKI...4 Components of PKI...6 Digital certificates... 6 Public and private keys... 7 Smart cards... 8 Certificate Authority (CA)... 10 Key
NIST Cryptographic Toolkit
Cryptographic Toolkit Elaine Barker ebarker@nist.gov National InformationSystem Security Conference October 16, 2000 Toolkit Purpose The Cryptographic Toolkit will provide Federal agencies, and others
ח'/סיון/תשע "א. RSA: getting ready. Public Key Cryptography. Public key cryptography. Public key encryption algorithms
Public Key Cryptography Kurose & Ross, Chapters 8.28.3 (5 th ed.) Slides adapted from: J. Kurose & K. Ross \ Computer Networking: A Top Down Approach (5 th ed.) AddisonWesley, April 2009. Copyright 19962010,
Security and Privacy. Xin Liu Computer Science University of California, Davis. Introduction 1-1
Security and Privacy Xin Liu Computer Science University of California, Davis Introduction 1-1 What is network security? Confidentiality: only sender, intended receiver should understand message contents
Crypto meets Web Security: Certificates and SSL/TLS
CSE 484 / CSE M 584: Computer Security and Privacy Crypto meets Web Security: Certificates and SSL/TLS Spring 2016 Franziska (Franzi) Roesner franzi@cs.washington.edu Thanks to Dan Boneh, Dieter Gollmann,
key distribution requirements for public key algorithms asymmetric (or public) key algorithms
topics: cis3.2 electronic commerce 24 april 2006 lecture # 22 internet security (part 2) finish from last time: symmetric (single key) and asymmetric (public key) methods different cryptographic systems
Computer Security: Principles and Practice
Computer Security: Principles and Practice Chapter 2 Cryptographic Tools First Edition by William Stallings and Lawrie Brown Lecture slides by Lawrie Brown Cryptographic Tools cryptographic algorithms
Access Control. Tom Chothia Computer Security, Lecture 5
Access Control Tom Chothia Computer Security, Lecture 5 The Crypto Wars 1993-1996: Clipper chip considered in US congress and rejected. Due partly to Matt Blaze s analysis and strongly attack by John Kerry
ASYMMETRIC (PUBLIC-KEY) ENCRYPTION. Mihir Bellare UCSD 1
ASYMMETRIC (PUBLIC-KEY) ENCRYPTION Mihir Bellare UCSD 1 Recommended Book Steven Levy. Crypto. Penguin books. 2001. A non-technical account of the history of public-key cryptography and the colorful characters
Authentication KAMI VANIEA 1
Authentication KAMI VANIEA FEBRUARY 1ST KAMI VANIEA 1 First, the news KAMI VANIEA 2 Today Basics of authentication Something you know passwords Something you have Something you are KAMI VANIEA 3 Most recommended
The question paper contains 40 multiple choice questions with four choices and students will have to pick the correct one (each carrying ½ marks.).
Time: 3hrs BCA III Network security and Cryptography Examination-2016 Model Paper 2 M.M:50 The question paper contains 40 multiple choice questions with four choices and students will have to pick the
Keeping Important Data Safe and Secure Online. Norm Kaufman
Keeping Important Data Safe and Secure Online Norm Kaufman Examples of Important Data Passwords and Secret Answers Personal Documents (Licenses, Passports, Insurance Cards, Credit Cards) Social Security
Computer Security. 10. Exam 2 Review. Paul Krzyzanowski. Rutgers University. Spring 2017
Computer Security 10. Exam 2 Review Paul Krzyzanowski Rutgers University Spring 2017 March 23, 2018 CS 419 2017 Paul Krzyzanowski 1 Question 1(a) Suppose you come across some old text in the form GEPPQ
L13. Reviews. Rocky K. C. Chang, April 10, 2015
L13. Reviews Rocky K. C. Chang, April 10, 2015 1 Foci of this course Understand the 3 fundamental cryptographic functions and how they are used in network security. Understand the main elements in securing
CSCI 454/554 Computer and Network Security. Topic 5.2 Public Key Cryptography
CSCI 454/554 Computer and Network Security Topic 5.2 Public Key Cryptography Outline 1. Introduction 2. RSA 3. Diffie-Hellman Key Exchange 4. Digital Signature Standard 2 Introduction Public Key Cryptography
Information Security. message M. fingerprint f = H(M) one-way hash. 4/19/2006 Information Security 1
Information Security message M one-way hash fingerprint f = H(M) 4/19/2006 Information Security 1 Outline and Reading Digital signatures Definition RSA signature and verification One-way hash functions
TPM v.s. Embedded Board. James Y
TPM v.s. Embedded Board James Y What Is A Trusted Platform Module? (TPM 1.2) TPM 1.2 on the Enano-8523 that: How Safe is your INFORMATION? Protects secrets from attackers Performs cryptographic functions
GT.M Database Encryption
GT.M Database Encryption Protecting Data At Rest (DAR) [ 1 ] April 30, 2009 What it is Protects data at rest (DAR) Data records in database & journal files are encrypted [ 2 ] What it is not Data not at
Cristina Nita-Rotaru. CS355: Cryptography. Lecture 17: X509. PGP. Authentication protocols. Key establishment.
CS355: Cryptography Lecture 17: X509. PGP. Authentication protocols. Key establishment. Public Keys and Trust Public Key:P A Secret key: S A Public Key:P B Secret key: S B How are public keys stored How
Test 2 Review. 1. (10 points) Timestamps and nonces are both used in security protocols to prevent replay attacks.
Test 2 Review Name Student ID number Notation: {X} Bob Apply Bob s public key to X [Y ] Bob Apply Bob s private key to Y E(P, K) Encrypt P with symmetric key K D(C, K) Decrypt C with symmetric key K h(x)
ESP Egocentric Social Platform
ESP Egocentric Social Platform T. J. Purtell, Ian Vo, Monica S. Lam With: Kanak Biscuitwala, Willem Bult, Dan Boneh, Ben Dodson, Steve Fan, and Frank Wang, Global Social Platforms Ideal for Meeting strangers
SECURITY IN NETWORKS
SECURITY IN NETWORKS GOALS Understand principles of network security: Cryptography and its many uses beyond con dentiality Authentication Message integrity WHAT IS NETWORK SECURITY? Con dentiality: only
Outline. CSCI 454/554 Computer and Network Security. Introduction. Topic 5.2 Public Key Cryptography. 1. Introduction 2. RSA
CSCI 454/554 Computer and Network Security Topic 5.2 Public Key Cryptography 1. Introduction 2. RSA Outline 3. Diffie-Hellman Key Exchange 4. Digital Signature Standard 2 Introduction Public Key Cryptography
1 Identification protocols
ISA 562: Information Security, Theory and Practice Lecture 4 1 Identification protocols Now that we know how to authenticate messages using MACs, a natural question is, how can we use MACs to prove that
Garantía y Seguridad en Sistemas y Redes
Garantía y Seguridad en Sistemas y Redes Tema 2. Cryptographic Tools Esteban Stafford Departamento de Ingeniería Informá2ca y Electrónica Este tema se publica bajo Licencia: Crea2ve Commons BY- NC- SA
Key Exchange. Secure Software Systems
1 Key Exchange 2 Challenge Exchanging Keys &!"#h%&'() & & 1 2 6(6 1) 2 15! $ The more parties in communication, the more keys that need to be securely exchanged " # Do we have to use out-of-band methods?
Cryptography and Network Security
Cryptography and Network Security Spring 2012 http://users.abo.fi/ipetre/crypto/ Lecture 8: Protocols for public-key management Ion Petre Department of IT, Åbo Akademi University 1 Key management two problems
Smalltalk 3/30/15. The Mathematics of Bitcoin Brian Heinold
Smalltalk 3/30/15 The Mathematics of Bitcoin Brian Heinold What is Bitcoin? Created by Satoshi Nakamoto in 2008 What is Bitcoin? Created by Satoshi Nakamoto in 2008 Digital currency (though not the first)
Outline. Public Key Cryptography. Applications of Public Key Crypto. Applications (Cont d)
Outline AIT 682: Network and Systems Security 1. Introduction 2. RSA 3. Diffie-Hellman Key Exchange 4. Digital Signature Standard Topic 5.2 Public Key Cryptography Instructor: Dr. Kun Sun 2 Public Key
ASYMMETRIC (PUBLIC-KEY) ENCRYPTION. Mihir Bellare UCSD 1
ASYMMETRIC (PUBLIC-KEY) ENCRYPTION Mihir Bellare UCSD 1 Recommended Book Steven Levy. Crypto. Penguin books. 2001. A non-technical account of the history of public-key cryptography and the colorful characters
CIS 3362 Final Exam. Date: 12/9/2015. Name:
CIS 3362 Final Exam Date: 12/9/2015 Name: 1) (7 pts) Consider an adjusted shift cipher on an alphabet with 36 characters, the letters 'A' through 'Z', followed by the digits '0' through '9', where the
Princess Nora Bint Abdulrahman University College of computer and information sciences Networks department Networks Security (NET 536)
Princess Nora Bint Abdulrahman University College of computer and information sciences Networks department Networks Security (NET 536) Prepared by Dr. Samia Chelloug E-mail: samia_chelloug@yahoo.fr Content
PGP(R) Desktop Version 10.1 for Mac OS X Release Notes
Page 1 of 8 PGP(R) Desktop Version 10.1 for Mac OS X Release Notes Thank you for using this PGP Corporation product. These Release Notes contain important information regarding this release of PGP Desktop
Data Modeling and Database Design
INF1343, Winter 2012 Data Modeling and Database Design Yuri Takhteyev Faculty of Information University of Toronto This presentation is licensed under Creative Commons Attribution License, v. 3.0. To view
CSC 774 Network Security
CSC 774 Network Security Topic 2. Review of Cryptographic Techniques CSC 774 Dr. Peng Ning 1 Outline Encryption/Decryption Digital signatures Hash functions Pseudo random functions Key exchange/agreement/distribution
Cryptographic Concepts
Outline Identify the different types of cryptography Learn about current cryptographic methods Chapter #23: Cryptography Understand how cryptography is applied for security Given a scenario, utilize general
Public-Key Cryptography. Professor Yanmin Gong Week 3: Sep. 7
Public-Key Cryptography Professor Yanmin Gong Week 3: Sep. 7 Outline Key exchange and Diffie-Hellman protocol Mathematical backgrounds for modular arithmetic RSA Digital Signatures Key management Problem:
Ref:
Cryptography & digital signature Dec. 2013 Ref: http://cis.poly.edu/~ross/ 2 Cryptography Overview Symmetric Key Cryptography Public Key Cryptography Message integrity and digital signatures References:
Introduction to Cryptography. Ramki Thurimella
Introduction to Cryptography Ramki Thurimella Encryption & Decryption 2 Generic Setting 3 Kerckhoff s Principle Security of the encryption scheme must depend only on The secret key NOT on the secrecy of
An Introduction to How PGP Works
An Introduction to How PGP Works Revision: 0.01 Author: Kenneth Robert Ballou Date 2005-07-21 Document Change History Change Description/Reason Changed By Date Revision Initial Creation of Document Kenneth
Problem Set 10 Due: Start of class December 11
CS242 Computer Networks Handout # 20 Randy Shull December 4, 2017 Wellesley College Problem Set 10 Due: Start of class December 11 Reading: Kurose & Ross, Sections 7.1 7.3, 8.1 8.4 Wireshark Lab [16] Recall
Chapter 9 Public Key Cryptography. WANG YANG
Chapter 9 Public Key Cryptography WANG YANG wyang@njnet.edu.cn Content Introduction RSA Diffie-Hellman Key Exchange Introduction Public Key Cryptography plaintext encryption ciphertext decryption plaintext
The most important development from the work on public-key cryptography is the digital signature. Message authentication protects two parties who
1 The most important development from the work on public-key cryptography is the digital signature. Message authentication protects two parties who exchange messages from any third party. However, it does
Practical Aspects of Modern Cryptography
Practical Aspects of Modern Cryptography Lecture 3: Symmetric s and Hash Functions Josh Benaloh & Brian LaMacchia Meet Alice and Bob Alice Bob Message Modern Symmetric s Setup: Alice wants to send a private
CS Computer Networks 1: Authentication
CS 3251- Computer Networks 1: Authentication Professor Patrick Traynor 4/14/11 Lecture 25 Announcements Homework 3 is due next class. Submit via T-Square or in person. Project 3 has been graded. Scores
The evolving storage encryption market
The evolving storage encryption market Alexander (S andy) S tewart S un M icros ys tems 1 S toragetek Drive, Louis ville, CO 80028 P hone:+1-303-673-2775 FAX: +1-303-661-5743 E-mail: alexander.s tewart@
Cryptography and Network Security
Cryptography and Network Security Third Edition by William Stallings Lecture slides by Lawrie Brown Chapter 15 Electronic Mail Security Despite the refusal of VADM Poindexter and LtCol North to appear,
18-642: Cryptography
18-642: Cryptography 4/16/2018 Cryptography [without system integrity] is like investing in an armored car to carry money between a customer living in a cardboard box and a person doing business on a park