5-1 Chapter 5 - Processor Design—Advanced Topics Chapter 5 ...
Chapter 5
description
Transcript of Chapter 5
![Page 1: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/1.jpg)
Henric Johnson 1
Chapter 5Chapter 5Electronic mail
security
Henric JohnsonBlekinge Institute of Technology, Sweden
http://www.its.bth.se/staff/hjo/[email protected]
![Page 2: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/2.jpg)
Henric Johnson 2
OutlineOutline• Pretty good privacy• S/MIME• Recommended web sites
![Page 3: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/3.jpg)
Henric Johnson 3
Pretty Good PrivacyPretty Good Privacy• Philip R. Zimmerman is the creator
of PGP.• PGP provides a confidentiality and
authentication service that can be used for electronic mail and file storage applications.
![Page 4: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/4.jpg)
Henric Johnson 4
Why Is PGP Popular?Why Is PGP Popular?• It is availiable free on a variety of
platforms.• Based on well known algorithms.• Wide range of applicability• Not developed or controlled by
governmental or standards organizations
![Page 5: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/5.jpg)
Henric Johnson 5
Operational DescriptionOperational Description• Consist of five services:
– Authentication– Confidentiality– Compression– E-mail compatibility– Segmentation
![Page 6: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/6.jpg)
Henric Johnson 6
![Page 7: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/7.jpg)
Henric Johnson 7
CompressionCompression• PGP compresses the message after
applying the signature but before encryption
• The placement of the compression algorithm is critical.
• The compression algorithm used is ZIP (described in appendix 5A)
![Page 8: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/8.jpg)
Henric Johnson 8
E-mail CompatibilityE-mail Compatibility• The scheme used is radix-64
conversion (see appendix 5B).• The use of radix-64 expands the
message by 33%.
![Page 9: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/9.jpg)
Henric Johnson 9
Segmentation and Segmentation and ReassemblyReassembly
• Often restricted to a maximum message length of 50,000 octets.
• Longer messages must be broken up into segments.
• PGP automatically subdivides a message that is to large.
• The receiver strip of all e-mail headers and reassemble the block.
![Page 10: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/10.jpg)
Henric Johnson 10
Sumary of PGP Services Sumary of PGP Services Function Algorithm Used Digital Signature DSS/ SHA or
RSA/ SHA Message Encryption
CAST or I DEA or three-key triple DES with Diffi e-Hellman or RSA
Compression ZI P E-mail Compatibility
Radix-64 conversion
Segmentation -
![Page 11: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/11.jpg)
Henric Johnson 11
![Page 12: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/12.jpg)
Henric Johnson 12
Format of PGP MessageFormat of PGP Message
![Page 13: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/13.jpg)
Henric Johnson 13
![Page 14: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/14.jpg)
Henric Johnson 14
![Page 15: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/15.jpg)
Henric Johnson 15
![Page 16: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/16.jpg)
Henric Johnson 16
The Use of TrustThe Use of Trust• Key legitimacy field• Signature trust field• Owner trust field
See Table 5.2 See Table 5.2 (W. Stallings)(W. Stallings)
![Page 17: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/17.jpg)
Henric Johnson 17
![Page 18: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/18.jpg)
Henric Johnson 18
Revoking Public Revoking Public KeysKeys• The owner issue a key revocation
certificate.• Normal signature certificate with a
revote indicator.• Corresponding private key is used
to sign the certificate.
![Page 19: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/19.jpg)
Henric Johnson 19
S/MIMES/MIME• Secure/Multipurpose Internet Mail
Extension• S/MIME will probably emerge as
the industry standard.• PGP for personal e-mail security
![Page 20: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/20.jpg)
Henric Johnson 20
Simple Mail Transfer Simple Mail Transfer Protocol (SMTP, RFC Protocol (SMTP, RFC
822)822)• SMTP Limitations - Can not transmit, or
has a problem with:– executable files, or other binary files (jpeg
image)– “national language” characters (non-ASCII)– messages over a certain size– ASCII to EBCDIC translation problems– lines longer than a certain length (72 to 254
characters)
![Page 21: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/21.jpg)
Henric Johnson 21
Header fields in MIMEHeader fields in MIME• MIME-Version: Must be “1.0” -> RFC 2045, RFC
2046• Content-Type: More types being added by
developers (application/word)• Content-Transfer-Encoding: How message
has been encoded (radix-64)• Content-ID: Unique identifying character string.• Content Description: Needed when content is
not readable text (e.g.,mpeg)
![Page 22: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/22.jpg)
Henric Johnson 22
S/MIME FunctionsS/MIME Functions• Enveloped Data: Encrypted content and
encrypted session keys for recipients.• Signed Data: Message Digest encrypted
with private key of “signer.”• Clear-Signed Data: Signed but not
encrypted.• Signed and Enveloped Data: Various
orderings for encrypting and signing.
![Page 23: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/23.jpg)
Henric Johnson 23
Algorithms UsedAlgorithms Used• Message Digesting: SHA-1 and MDS• Digital Signatures: DSS• Secret-Key Encryption: Triple-DES,
RC2/40 (exportable)• Public-Private Key Encryption: RSA
with key sizes of 512 and 1024 bits, and Diffie-Hellman (for session keys).
![Page 24: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/24.jpg)
Henric Johnson 24
User Agent RoleUser Agent Role• S/MIME uses Public-Key Certificates - X.509
version 3 signed by Certification Authority• Functions:
– Key Generation - Diffie-Hellman, DSS, and RSA key-pairs.
– Registration - Public keys must be registered with X.509 CA.
– Certificate Storage - Local (as in browser application) for different services.
– Signed and Enveloped Data - Various orderings for encrypting and signing.
![Page 25: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/25.jpg)
Henric Johnson 25
User Agent RoleUser Agent Role• Example: Verisign (www.verisign.com)
– Class-1: Buyer’s email address confirmed by emailing vital info.
– Class-2: Postal address is confirmed as well, and data checked against directories.
– Class-3: Buyer must appear in person, or send notarized documents.
![Page 26: Chapter 5](https://reader035.fdocuments.in/reader035/viewer/2022062814/56816865550346895ddebfbb/html5/thumbnails/26.jpg)
Henric Johnson 26
Recommended Web Recommended Web SitesSites
• PGP home page: www.pgp.com• MIT distribution site for PGP• S/MIME Charter• S/MIME Central: RSA Inc.’s Web Site