Page 261 - CISSO_Prep_ Guide
P. 261

•  The signature is created by encrypting a
                          digest (hash value) of the message with
                          the private key.
                       •  Benefits: non-repudiation of origin &
                          sender.  It can also use with a signed
                          receipt of the original hash for non-
                          repudiation of receipt & delivery.  It also
                          provides integrity because of hashing.
                       •  Types
                              •  RSA
                              •  El Gamal
                              •  Fiat-Shamir
                              •  Schnorr
                              •  Nyberg-Rueppel
                              •  Digital Signature Standard (DSS)
                                     ▪  SHA-1
                                     ▪  Digital Signature Algorithm
                                         (DSA)

                   Certification
                       •  X.509 standard.
                       •  Certificate authority: manages certificate
                          lifecycle; a trusted third party.
                       •  CRL: certificate revocation list.
                       •  Internal certificates (i.e., in-house
                          certificates) are typically issued by
                          human resources or by that personnel
                          responsible for issuing building badges.
                       •  The certificate includes version, serial
                          number, algorithm types, issuer, valid
                          dates, name of the owner, public key,
   256   257   258   259   260   261   262   263   264   265   266