1. 1 May 25, 2005 Security Pki en pkcs

2. 2 May 25, 2005 Waarom beveiligen? Confidentiality – to keep exchanged information private Integrity – to prove that exchanged information has not been manipulated in transit Authentication – to prove the identity of an entity engaged in a transaction Non repudiation – to ensure that an entity can not deny participation in a transaction

3. 3 May 25, 2005 Soorten beveiliging Synchroon Asynchroon

4. 4 May 25, 2005 Synchroon Van te voren een sleutel afspreken. Deze moet veilig worden uitgewisseld MIM-attack!

5. 5 May 25, 2005 Asynchroon Publieke en Private sleutel

6. 6 May 25, 2005 Uitwisselen van sleutels: PKI PKI = Public Key Infrastructure Certificaten gemaakt door vertrouwde derde partij (TTP)

7. 7 May 25, 2005 TTP’s CA: Certification Authority RA: Registration Authority Bijvoorbeeld: Verisign, diginotar

8. 8 May 25, 2005 PKCS PKCS refers to a group of Public Key Cryptography Standards devised and published by RSA laboratoriesPublic Key CryptographyStandards

9. 9 May 25, 2005 Overzicht van standaarden Name PKCS#1RSA Cryptography Standard PKCS#2Withdrawn PKCS#3Diffie-Hellman Key AgreementDiffie-Hellman Key Agreement Standard PKCS#4Withdrawn PKCS#5Password-based Encryption Standard PKCS#6Extended-Certificate Syntax Standard PKCS#7Cryptographic Message Syntax Standard. Used to sign and/or encrypt messages under a PKI. PKCS#8Private-Key Information Syntax Standard PKCS#9Selected Attribute Types PKCS#10Certification Request Standard PKCS#11Cryptographic Token Interface (cryptoki). An API defining a generic interface to cryptographic tokensAPIcryptographic tokens PKCS#12 Personal Information Exchange Syntax Standard. Defines a file format commonly used to store private keys with accompanying Public key certificates protected with a password-based symmetric key.private keys Public key certificatessymmetric key PKCS#13Elliptic Curve CryptographyElliptic Curve Cryptography Standard PKCS#14Pseudo-random Number Generation PKCS#15Cryptographic Token Information Format Standard

10. 10 May 25, 2005 PKCS #11 Toegang tot software tokens, smartcards, usb-sticks… Java: JCA en JCE Universele toegang tot cryptographic tokens http://java.sun.com/j2se/1.5.0/docs/guide/security/p11guide.html

11. 11 May 25, 2005 PKCS #12 Formaat voor een keystore Standaard in Java: Java Key Store Maar ook: PKCS#12 Eventueel met extra library: http://www.bouncycastle.org/ http://www.developer.com/java/ent/article.php/3105261