Cryptography and Network Security Overview
Uploaded by
116 Namrata SinghCryptography and Network Security Overview
Uploaded by
116 Namrata SinghCommon questions
Powered by AIBlock cipher modes of operation, such as ECB and CBC, have distinct security implications. ECB exposes patterns in plaintext due to identical encryption for identical blocks, making it vulnerable to known-plaintext attacks. CBC, while providing better security by chaining dependencies from the previous ciphertext block, is susceptible to padding oracle attacks if improperly implemented .
The SSL handshake process secures communication by allowing the client and server to authenticate each other and establish encryption algorithms and keys before data transmission. Critical components include certificate exchange and verification, key exchange to establish a shared secret known as the pre-master secret, and the derivation of session keys from the pre-master secret for secure communication .
The Diffie-Hellman key exchange algorithm enables two parties to securely exchange cryptographic keys over a public channel. It uses a shared secret that is derived from each party's private and public key pairs, ensuring secure communication. However, it lacks authentication, making it vulnerable to man-in-the-middle attacks .
A digital envelope allows secure transmission of the encryption key. It is constructed by encrypting a session key with the recipient's public key, ensuring only the intended recipient can decrypt it using their private key. This combines the speed of symmetric key encryption for data with the security of asymmetric key encryption for key exchange .
Firewall design principles include filtering incoming and outgoing traffic based on an organization’s security policy, logging and auditing network traffic for suspicious activity, and being transparent in their operations. Packet-filtering firewalls enforce access controls at the network level, stateful inspection firewalls monitor active connections, and application-layer firewalls scrutinize transactions at the application level to fulfill these principles .
Certificate-based authentication systems provide security by issuing digital certificates that verify the identity of parties involved in a transaction. Each certificate contains the public key and identity information signed by a certification authority. Challenges include managing certificate issuance, renewal, and revocation, as well as maintaining trust in certificate authorities .
The SET protocol facilitates secure e-commerce by providing authentication for all parties involved and ensuring confidentiality of payment information. Unlike SSL, which primarily secures the transmission channel, SET protects credit card details even from merchants, addressing weaknesses in confidentiality and trust among non-direct parties in a transaction .
Symmetric key cryptography uses the same key for both encryption and decryption, offering speed and requiring fewer computational resources. However, it poses challenges in key distribution. Asymmetric key cryptography uses different keys for encryption and decryption, enhancing security through the ease of key distribution but generally being slower due to more complex computations .
Passive threats involve monitoring of transmissions without altering the communication, such as eavesdropping on communications to obtain sensitive information, thus impacting confidentiality. Active threats involve modification of the data stream or creation of a false stream, such as unauthorized changes to data or denial of service attacks, impacting both integrity and availability .
A digital signature enhances message authentication and integrity by providing a unique value that is a cryptographic transformation of the message. It involves the signer's private key in the creation of a signature, and verification is done by the receiver using the signer's public key to ensure the message has not been altered and is authentic .