From cabbba858a88233dffaa025e9260cc85ac3b2e1e Mon Sep 17 00:00:00 2001 From: Jet Hughes Date: Thu, 20 Oct 2022 13:05:03 +1300 Subject: [PATCH] vault backup: 2022-10-20 13:05:03 --- content/notes/24-network-security.md | 26 ++++++++++++++++++++++++-- content/notes/cosc-203.md | 1 + 2 files changed, 25 insertions(+), 2 deletions(-) diff --git a/content/notes/24-network-security.md b/content/notes/24-network-security.md index 7fecea226..799aafd3f 100644 --- a/content/notes/24-network-security.md +++ b/content/notes/24-network-security.md @@ -4,6 +4,9 @@ aliases: tags: - cosc203 - lecture +sr-due: 2022-10-23 +sr-interval: 3 +sr-ease: 250 --- # what is it? @@ -105,13 +108,32 @@ RSA - problem: man in the middle attack: trudy poses as alice to bob, and as bob to alice - ![](https://i.imgur.com/SFdYjdZ.png) - need a better way to get public key + +# digital signature - Digital signatures - analogous to hand-signatures - sender digitally signs a document - verifiable, nonforgeable - simple digital signature - bob signs with his private key: creating signed message - - + - alice uses publc key to verify + - issue + - lots of computation on long messages +- hash function + - apply hash function to get fixed size message digest, H(m) + - then sign on the digest not the full message + +![diagram](https://i.imgur.com/sSRoWGU.png) + +# certification authorities +- binds public key to particular entity, E +- entity registers its public key with CE provides proof of identity to CA + - CA creates cert binding id E to E's public key + - cert containing E's public key digitally signed by CA +- when alice wants bobs public key + - get bobs cert + - apply CAs public key to bobs certificate, get bobs public key + +![](https://i.imgur.com/zccc9XF.png) -# digital signature diff --git a/content/notes/cosc-203.md b/content/notes/cosc-203.md index 50f8b0bfe..1250112a6 100644 --- a/content/notes/cosc-203.md +++ b/content/notes/cosc-203.md @@ -52,6 +52,7 @@ tags: - [21-data link layer and LAN](21-data-link-layer) - [22-LAN and physical layer](22-LAN-physical-layer) - [23-wireless-mobile](23-wireless-mobile) +- [24-network-security](notes/24-network-security.md) - # Archive