In order to deploy public key cryptographic schemes in practice, one first needs

Question

In order to deploy public key cryptographic schemes in practice, one first needs to establish a public key infrastructure. This is normally done via the deployment of certificate authority. Investigate the standards for public key infrastructure (PKI) deployment and application scenarios.

- Evaluate the available standards for PKI.

-How do browsers (e.g., IE, Firefox, Chrome, or others) implement a PKI? How secure is this implementation and can you design an attacking scenario to break the PKI within one of the commonly used browsers?

Explanation / Answer

Answer)

The standards for public key infrastructure :

1) X.509

2) PKCS (Public Key Cryptography Standard)

3) S/MIME (For secure messaging)

4) SSL and TLS (For secure access to Web servers)

5) SET (Secure Electronic Transactions) - For authentication , data integrity and confidentiality

6) IPSEC (Internet protocol security protocol standard) - For IP encryption and deploying VPNs

The available standards for PKI which are widely adopted are X.509 from ITU (International Telecommunication Union) and PKCS (Public Key Crytography Standards) from RSA Data Security.

The browsers are provided with less certificates/standards where as the following are the ways to secure the data via PKI.

1) Protection at application layer (A system is to be designed in such a manner that the messages are secure even when they are directed to a different network)

2) Entering TLS (Encryption and authentication of data during transmit)

3) Trusting Identities Online (For a secure communication there should be tools enabled which are digital certificates and public key cryptographed)

The implementation is done either in a centralized distribution or in a distributed key manner.

The scenarios which might result in breaking the PKI is Cloud Disruption

Related Questions

Navigate

• Browse (All)
• Browse I
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.