Digital Signatures and Public Key Infrastructures

11.02.02


Click here to start


Table of Contents

Digital Signatures and Public Key Infrastructures

Content

Cryptography

PPT Slide

PPT Slide

PPT Slide

Confidentialty

PPT Slide

PPT Slide

Why do we need Certification Services?

Why do we need Certification?

Trust

Different Approaches

PGP Trust Model

PEM Trust Model

PEM Trust Model

Where are we now?

Certification system requirements

PPT Slide

PKI Components for Digital Signatures

PPT Slide

PPT Slide

PPT Slide

PPT Slide

PPT Slide

PKIX - MANDATORY SCHEMES

PKIX - CENTRALISED SCHEME

PKIX - BASIC AUTHENTICATED SCHEME

PKIX - PROOF OF POSSESSION OF PRIVATE KEY (POP)

POP - ENCRYPTION KEY - DIRECT METHOD USING A RA (challenge - response)

POP - ENCRYPTION KEY - INDIRECT METHOD

PPT Slide

PPT Slide

PPT Slide

PPT Slide

PKCS: Public Key Cryptography Standards

PKCS #1: RSA Cryptography

PKCS #7: Cryptographic Message Syntax

PKCS #11: Cryptographic Token Interface (Cryptoki)

PKCS #15: Cryptographic Token Information Format

Other PKCS Documents

Applications

PPT Slide

Secure E-Mail

EMail Security Requirements

Historic: Internet Privacy Enhanced Mail (PEM)

PEM Message Transformation

PEM Certification Structure

PEM-Message Signed

PEM-Message Encrypted

S/MIME

Overview: S/MIME Building Blocks

Internet Message Protocol Layers

Message Flow and Control Flow

The S/MIME Building Blocks

Overview of “Classic” Internet Mail

RFC 822 – Format of Text Messages

The S/MIME Building Blocks

Mechanisms Added by MIME

MIME Content Types

The S/MIME Building Blocks

What Are S/MIME Messages?

S/MIME Version 2

S/MIME Version 3

S/MIME Specification Elements

CMS Content Types In S/MIME

S/MIME “application/pkcs7-mime”

The S/MIME Building Blocks

Encrypted Message Structure

Example of Encrypted Message

Information to Assist Recipient’s UA

Format of CMS Enveloped Data

The S/MIME Building Blocks

Formats for Signed Messages

Format of CMS Signed Data

Fields in CMS Signed Data

Format of CMS SignerInfo

Fields in CMS SignerInfo

Format of Certificates-Only Message

Format of MIME “multipart/signed”

Example of MIME “multipart/signed”

S/MIMEv3 Algorithm Support

Web Security Requirements

Secure Transport Channels

SSL

SSL Layer in Internet Protocol Stack

Secure Sockets Layer Protocol (SSL)

SSL (cont’d)

IP Security

IP Security Features

AH and ESP Layering Options

IPsec Path Options

IP in the Protocol Hierarchy

IP Datagram Structure

IP Security Headers

Security Association

Security Association (cont'd)

Authentication Header (AH)

Encapsulating Security Payload (ESP)

Encapsulating Security Payload (ESP)

Encapsulating Security Payload (ESP)

PPT Slide

Key Management

Legal Aspects

Usability of Digital Signatures in a legal system requires ...

Legal Recognition: European Directive

European Directive Highlights

EESSI Charter

EESSI Objectives

EESSI standards overview

E-Sign Work Areas

Area D: Objective of the CWA

Area D: Structure of the Document

Area D: Services of the CSP

Area D: CSP System

Area D: Security Levels

Area D: Security Environment

Area D: Security Requirements

Area D: Assurance requirements

Area F: Directive Requirements for standardization of the SSCD

Area F: What is a secure signature creation device

ANNEX III of EC-Directive Requirements for secure signature-creation devices

Scope of Area G1

Area G1: Technical Issues

Area G1: Different requirements in different physical locations

Area G2: Validation process

Area G2: Validation environment

Area G2: Other issues

Conformity Assessment of Secure Signature Creation Devices

Conformity Assessment of Certification Service Providers

Conformity Assessment of Trustworthy Systems

Author: Wolfgang Schneider