Skip to:Content
|
Bottom
Cover image for Cryptography decrypted
Title:
Cryptography decrypted
Personal Author:
Publication Information:
Boston, Mass. : Addison-Wesley, 2001
ISBN:
9780201616477
Added Author:

Available:*

Library
Item Barcode
Call Number
Material Type
Item Category 1
Status
Searching...
30000010059065 QA76.9.A25 M44 2001 Open Access Book Book
Searching...

On Order

Summary

Summary

Cryptography is at the heart of computer security: without it, secure e-commerce and Internet communications would be impossible. Decision-makers and sophisticated computer users need to understand cryptography -- but most explanations are highly mathematical and technical. Cryptography Decrypted explains cryptography in "plain English" -- and is authoritative and thorough enough to address the needs of professionals. It explains the processes step-by-step, with extensive visuals. The authors present the elements of cryptography systems; public key infrastructure (PKI); and the IPSec standard for virtual private network security; then review real-world systems and their applications. They show how real-world systems are attacked, and how to protect them; introduce essential cryptographic terms; and present the fascinating history of cryptography through sidebars highlighting its important events, people, and breakthroughs. For every decision-maker and computer user who needs to understand cryptography, this book is also ideal for security pros who need to educate management about cryptography.


Author Notes

H.X. Mel consults and develops computer systems for organizations such as Lucent, Xerox, MIT, the U.S. Government, Motorola, Goldman Sachs, and PricewaterhouseCoopers. Doris Baker is a freelance technical writer and editor.

0201616475AB04062001


Excerpts

Excerpts

A Tool for Everyone In the past, cryptography was used mainly to secure the communications of the powerful and influential, the military and royalty. But the widespread use of computers, and the attacks to which they are vulnerable, has expanded the need for secure communications around the globe. This book describes the protection afforded by modern computer cryptographic systems and explains how the pace of modern technology requires continuing attention to the security of those systems. The advent of computers changed a great many things, but not the fundamentals of cryptography. Through stories and pictures, Cryptography Decrypted presents cryptography's evolution into a modern-day science, laying out patterns from the past that are applicable today. It also gives you a thorough understanding of terms that are destined to become as much a part of our language and life as megabyte and Internet . As you begin to think about controlling various aspects of your life using wired or wireless communication, on line all the time, your understanding of cryptography--its benefits and its pitfalls--will make you feel a little more in control of a rapidly changing world. Because rapid advances in the speed of hardware will continue to threaten the security of current cryptographic methods, it's essential that you choose appropriate techniques and perform ongoing assessment if you want to maintain your digital security. You can make such choices and assessments only if you know the basic concepts of cryptography. Cryptography Decrypted offers you that knowledge through visual representation of difficult concepts, an easy-to-use reference for reviewing key cryptographic terminology, and instructive historical information. You need little or no background in cryptography to read this book. Neither does it require technical or math genius. It's designed so that anyone from CIOs to self-taught computer enthusiasts--and everyone in between--can pick up this book without any knowledge of encryption and find it fascinating, understandable, and instructive. If you have some understanding of computer cryptography, Cryptography Decrypted is systematic and comprehensive enough to solidify your knowledge. It provides a simple description of the component parts of secret key and public key cryptography. (Those who already understand and don't wish to cover any more material about secret key cryptography may choose to read only Parts II through IV, bypassing Part I.) Throughout the book, we use images to clarify cryptographic terms. After explaining the basic cryptographic components, we describe real-world cryptographic systems, some possible attacks on those systems, and ways to protect your keys. The book provides a historical framework on which to build your understanding of how and why computer cryptography works. After a discussion of how cryptography has evolved into an essential Internet tool, we analyze secret key exchange problems and then explain the evolution of public key cryptography, with its solution to the key exchange problem. Along the way we explain some simple background on the math tricks that make public key cryptography secure. Traditionally, those who have thoroughly understood cryptography have been trained as mathematicians or scientists. Our goal here is to explain computer cryptography with rather little discussion of math. If the esoteric details aren't of immediate concern to you, you can skip Chapter 11 ("Making Public Keys: Math Tricks"), Chapter 14 ("Message Digest Assurances"), and the appendixes without diminishing your understanding of the basic concepts. Appendix A describes some aspects of public key mathematics, including inverses, primes, the Fermat test, Diffie-Hellman, DSA, elliptic curve, and pseudo-random number generation. Appendix B provides details of IPsec, a security system introduced in Chapter 21. 0201616475P04062001 Excerpted from Cryptography Decrypted by Pankaj Jalote, H. X. Mel, Doris M. Baker All rights reserved by the original copyright owners. Excerpts are provided for display purposes only and may not be reproduced, reprinted or distributed without the written permission of the publisher.

Table of Contents

Forewordp. xv
Prefacep. xvii
Introductionp. xix
Part I Secret Key Cryptographyp. 1
Chapter 1 Locks and Keysp. 3
Locks and Combinationsp. 3
Defining Cryptographic Termsp. 5
Making and Solving Puzzlesp. 6
Reviewp. 6
Chapter 2 Substitution and Caesar's Cipherp. 7
Cryptanalysis of Caesar's Cipherp. 10
Empowering the Massesp. 11
The Importance of Separating the Method and the Keyp. 12
Adding Keysp. 13
A Weakness of Caesar's Ciphers: The Failure to Hide Linguistic Patternsp. 14
More Complex Substitution: Vigenere's Cipherp. 15
Reviewp. 19
Chapter 3 Transposition Ciphers: Moving Aroundp. 21
Patterns and Cryptanalysisp. 22
Adding Complexityp. 23
Computer Transpositionp. 25
Combining Substitution and Transpositionp. 26
Reviewp. 28
Chapter 4 Diffuse and Confuse: How Cryptographers Win the End Gamep. 29
Diffusionp. 29
The Polybius Cipherp. 30
The Principle of Confusionp. 33
Cryptographic Locks and Keysp. 34
Reviewp. 35
Chapter 5 DES Isn't Strong Anymorep. 37
The Historical Need for an Encryption Standardp. 37
Cycling Through Computer Keysp. 40
Double and Triple DESp. 41
DES (and Other Block Cipher) Modesp. 42
The Avalanche Effectp. 42
Supplement: Binary Numbers and Computer Lettersp. 43
Reviewp. 44
Chapter 6 Evolution of Cryptography: Going Globalp. 45
Early Cryptographyp. 46
Commercial and Military Needsp. 48
Entering the Computer Agep. 49
Reviewp. 51
Chapter 7 Secret Key Assurancesp. 53
Confidentialityp. 54
Authenticationp. 55
An Authentication Attackp. 57
Not Really Random Numbersp. 57
Integrityp. 59
Using the MAC for Message Integrity Assurancep. 60
Why Bother Using a Message Authentication Code?p. 62
File and MAC Compressionp. 62
Nonrepudiation: Secret Keys Can't Do Itp. 63
Reviewp. 64
Chapter 8 Problems with Secret Key Exchangep. 65
The Problem and the Traditional Solutionp. 66
Using a Trusted Third Partyp. 68
Key Distribution Center and Key Recoveryp. 70
Problems with Using a Trusted Third Partyp. 71
Growth in the Number of Secret Keysp. 71
Trust and Lifetimep. 72
Reviewp. 72
Part II Public Key Cryptographyp. 75
Chapter 9 Pioneering Public Key: Public Exchange of Secret Keysp. 77
The Search for an Innovative Key Delivery Solutionp. 77
Developing an Innovative Secret Key Delivery Solutionp. 77
First Attempt: A Database of Key/Serial Number Pairsp. 78
Second Attempt: An Encrypted Database of Key/Serial Number Pairsp. 79
Merkle's Insight: Individually Encrypted Key/Serial Number Pairsp. 80
Black Hat's Frustrating Problemp. 81
The Key to Public Key Technologyp. 82
A New Solution: Diffie-Hellman-Merkle Key Agreementp. 84
Alice and Bob Openly Agree on a Secret Keyp. 84
Problems with the Diffie-Hellman Methodp. 86
Separate Encryption and Decryption Keysp. 86
Reviewp. 88
Chapter 10 Confidentiality Using Public Keysp. 89
New Twists on Old Security Issuesp. 89
Confidentiality Assurancesp. 92
Distribution of Public Keysp. 92
Two-Way Confidentialityp. 94
Reviewp. 95
Chapter 11 Making Public Keys: Math Tricksp. 97
Alice's Easy Problemp. 98
Grade School Math Tricksp. 100
More Grade School Mathp. 101
Division and Remainders: Modular Mathp. 103
Modular Inversesp. 106
Using Modular Inverses to Make a Public Keyp. 109
Putting It All Togetherp. 110
Giving BlackHat a Difficult, Time-Consuming Problemp. 110
Trapdoor to the Easy Problemp. 111
Knapsack Cryptographyp. 112
Modulo Calculationsp. 112
Exercise: Find Which Numbers Sum to 103p. 112
Reviewp. 113
Chapter 12 Creating Digital Signatures Using the Private Keyp. 115
Written and Digital Signature Assurancesp. 116
Reviewing and Comparing Authenticationp. 117
Secret Key Authenticationp. 117
Private Key Authenticationp. 117
Authentication and Integrity Using Private and Secret Keysp. 119
Private Key Authentication Methodsp. 120
RSAp. 120
DSAp. 121
Signing Terminologyp. 122
Nonrepudiationp. 122
Assurances in Both Directionsp. 123
Summary of Public Key Assurancesp. 123
Public Key Means Public / Private Keyp. 124
Assurance Initiatedp. 124
Compressing before Signingp. 124
Reviewp. 125
Chapter 13 Hashes: Non-keyed Message Digestsp. 127
Detecting Unintentional Modificationsp. 129
Detecting Intentional Modificationsp. 131
Signing the Message Digestp. 133
Detecting BlackHat's Forgeryp. 135
Replay Attacksp. 136
Supplement: Unsuccessfully Imitating a Message Digestp. 137
Reviewp. 138
Chapter 14 Message Digest Assurancesp. 141
Two Message Digest Flavorsp. 141
Non-keyed Message Digest Assurancesp. 143
One-waynessp. 143
Collision Resistancep. 143
Weak Collision Resistancep. 144
Examples of One-way and Weak Collision Resistancep. 145
Strong Collision Resistancep. 147
Non-keyed Digest Implementationsp. 150
Keyed Message Digest Assurancesp. 151
A MAC Made with DESp. 151
DES-MAC Securityp. 152
Message Digest Compressionp. 154
Digest Speed Comparisonsp. 155
Hashed MACp. 155
Reviewp. 156
Chapter 15 Comparing Secret Key, Public Key, and Message Digestsp. 157
Encryption Speedp. 157
Key Lengthp. 158
Ease of Key Distributionp. 158
Cryptographic Assurancesp. 159
Symmetric (Secret) Keyp. 159
Asymmetric (Public) Keyp. 159
Reviewp. 161
Part III Distribution of Public Keysp. 163
Chapter 16 Digital Certificatesp. 165
Verifying a Digital Certificatep. 167
Attacking Digital Certificatesp. 167
Attacking the Creator of the Digital Certificatep. 168
Malicious Certificate Creatorp. 168
Attacking the Digital Certificate Userp. 168
The Most Devastating Attackp. 168
Understanding Digital Certificates: A Familiar Comparisonp. 169
Issuer and Subjectp. 169
Issuer Authenticationp. 169
Transfer of Trust from the Issuer to the Subjectp. 170
Issuer's Limited Liabilityp. 171
Time Limitsp. 171
Revoking Trustp. 171
More than One Certificatep. 172
Fees for Usep. 172
The Needs of Digital Certificate Usersp. 172
Getting Your First Public Keyp. 173
Certificates Included in Your Browserp. 174
Reviewp. 174
Chapter 17 X.509 Public Key Infrastructurep. 177
Why Use X.509 Certificate Management?p. 178
What Is a Certificate Authority?p. 179
Application, Certification, and Issuancep. 179
Certificate Revocationp. 181
Polling and Pushing: Two CRL Delivery Modelsp. 182
Building X.509 Trust Networksp. 182
Root Certificatesp. 183
More Risks and Precautionsp. 187
Distinguished Namesp. 188
Certification Practice Statementp. 189
X.509 Certificate Datap. 189
Challenge Response Protocolp. 190
Reviewp. 190
Chapter 18 Pretty Good Privacy and the Web of Trustp. 193
The History of PGPp. 193
Comparing X.509 and PGP Certificatesp. 194
Building Trust Networksp. 196
Bob Validates Alice's Keyp. 196
Casey Validates Alice's Key Sent by Bobp. 197
Dawn Validates Alice's Key Sent by Casey via Bobp. 198
Web of Trustp. 200
PGP Certificate Repositories and Revocationp. 200
Compatibility of X.509 and PGPp. 201
Reviewp. 201
Part IV Real-World Systemsp. 203
E-mail Cryptographic Parametersp. 204
Negotiation of SSL and IPsec Cryptographic Parametersp. 204
User Initiation of Cryptographic E-mail, SSL, and IPsecp. 205
Chapter 19 Secure E-mailp. 207
Generic Cryptographic E-mail Messagesp. 207
Invoking Cryptographic Servicesp. 209
Confidentiality and Authenticationp. 211
Choosing Servicesp. 211
Positioning Servicesp. 212
Deterring E-mail Virusesp. 213
Reviewp. 213
Chapter 20 Secure Socket Layer and Transport Layer Securityp. 215
History of SSLp. 216
Overview of an SSL Sessionp. 216
An SSL Session in Detailp. 218
Hello and Negotiate Parametersp. 219
Key Agreement (Exchange)p. 221
Authenticationp. 222
Confidentiality and Integrityp. 223
TLS Variationsp. 224
Anonymous Diffie-Hellmanp. 224
Fixed and Ephemeral Diffie-Hellmanp. 225
Comparing TLS, SSL v3, and SSL v2p. 225
A Big Problem with SSL v2p. 225
A Possible Problem with TLS and SSLp. 225
Generating Shared Secretsp. 226
Bob Authenticates Himself to AliceDotComStocksp. 227
Reviewp. 227
Chapter 21 IPsec Overviewp. 229
Enhanced Securityp. 229
Key Managementp. 230
Manual Distributionp. 231
Automated Distributionp. 231
IPsec Part 1: User Authentication and Key Exchange Using IKEp. 232
SSL/TLS and IPsec Key Agreementp. 232
Security Associationp. 232
Phasesp. 233
IKE Nomenclaturep. 235
Benefits of Two-Phase Key Exchangep. 235
IPsec Part 2: Bulk Data Confidentiality and Integrity for Message or File Transportp. 237
Protocol and Modep. 238
ESP Examplesp. 241
AH Examplesp. 243
Management Controlp. 244
Implementation Incompatibilities and Complicationsp. 245
Reviewp. 246
Chapter 22 Cryptographic Gotchasp. 247
Replay Attackp. 247
Man-in-the-Middle Attackp. 247
Finding Your Keys in Memoryp. 249
Does Confidentiality Imply Integrity?p. 249
Example 1

p. 250

Example 2 Cut-and-Paste Attackp. 250
Public Key as a Cryptanalysis Toolp. 251
Example 1 The Chosen Plaintext Attackp. 251
Public Key Cryptographic Standardsp. 253
Example 2 The Bleichenbacher Attackp. 253
BlackHat Uses Bob's RSA Private Keyp. 253
Reviewp. 257
Chapter 23 Protecting Your Keysp. 259
Smart Cardsp. 259
Types of Smart Cardsp. 260
What's Inside a Smart Cardp. 261
Protections and Limitationsp. 261
Smart Card Attacksp. 261
Reviewp. 262
Epiloguep. 263
Appendix A Public Key Mathematics (and Some Words on Random Numbers)p. 267
Appendix B (A Few) IPsec Detailsp. 321
Bibliographyp. 337
Indexp. 345
Go to:Top of Page