Cryptography and Computer Network Security

Up

  BASIC CONCEPTS
KEY MANAGEMENT
  CLASSICAL CRYPTOALGORITHMS
  PUBLIC KEY CRYPTOALGORITHMS
  SECURITY SERVICES
  CRYPTOGRAPHIC STANDARDS AND SECURE INTERNET PROTOCOLS

 

BASIC CONCEPTS

 

  1. The need for security services in today's computer networks
    2. bullet
    Threats to computer security
    bullet
    Security services in computer networks and relationships among them:
    bullet
    confidentiality, integrity, authentication, non-repudiation
    bullet
    identification, access control, auditing
    bullet
    Electronic commerce and other applications of security services in today's computer networks
    bullet
    Survey of domestic and foreign cryptographic products
  2. Basic concepts of cryptology
    3. bullet
    Cryptosystem, plaintext, ciphertext, key
    bullet
    Examples of simple cryptosystems
    bullet
    To publish or not to publish?
    bullet
    Secret and open research in cryptology
    bullet
    Software vs. hardware implementations of cryptography
    bullet
    Evolution of cryptography and cryptanalysis.
  3. Types of cryptosystems. Implementation of security services
    4. bullet
    Classical (symmetric) vs. public key (asymmetric) cryptosystems
    bullet
    Trapdoor one-way functions - main components of public key cryptosystems
    bullet
    Features required from today's ciphers
    bullet
    Implementing security services using cryptographic transformations
    bullet
    Block vs. stream ciphers
    bullet
    Measures of the cipher strength

KEY MANAGEMENT

  1. Key Management

    2. bullet
    Session keys and key encrypting keys
    bullet
    Exchange of keys using Key Distribution Center
    bullet
    The Diffie-Hellman key exchange protocol
    bullet
    Exchange of symmetric keys using public key cryptosystems
    bullet
    Generation and registration of the public key pair
    bullet
    Concept of a public key certificate
    bullet
    Formats of certificates
    bullet
    Hierarchy of Certification Authorities - Public Key Infrastructure
    bullet
    Certificate revocation
  2. Pretty Good Privacy

    3. bullet
    E-mail Security
    bullet
    Implementation of Basic Security Services in PGP
    bullet
    General Format of PGP Messages
    bullet
    Key Rings
    bullet
    PGP Trust Model

     

    Up

 

CLASSICAL CRYPTOALGORITHMS
  1. Mathematical Background

    2. bullet
    Motivation
    bullet
    Basic definitions
    bullet
    Laws of modular arithmetic
    bullet
    Euclid's algorithm
    bullet
    Extended Euclid's algorithm
    bullet
    Solving linear congruences
  2. Historical ciphers

    3. bullet
    Substitution ciphers
    bullet
    monoalphabetic
    bullet
    polyalphabetic
    bullet
    running-key
    bullet
    polygram
    bullet
    homophonic
    bullet
    Transposition ciphers
    bullet
    Breaking substitution ciphers using frequency analysis
    bullet
    Breaking polyalphabetic ciphers using Kasiski's method and method of the index of coincidance
    bullet
    Shannon's theory of perfect secrecy and its practical implications. One-time pad.
    bullet
    Product ciphers
  3. Data Encryption Standard - first attempt to standardize protection of information in public computer networks

    4. bullet
    History of the cryptosystem - the NBS-NSA-IBM roles
    bullet
    Acceptance by government and commercial sectors
    bullet
    Main features of the algorithm
    bullet
    Design criteria
    bullet
    Differential and linear cryptanalysis
    bullet
    Vulnerability to the exhaustive key search attack
    bullet
    Extensions of DES: Triple DES, DESX
    bullet
    Modes of operation
    bullet
    Security of different operational modes
  4. Modes of operation of block ciphers
    bullet
    Block ciphers vs. stream ciphers
    bullet
    CTR, OFB, CFB, CBC
    bullet
    Comparison of existing modes of operation
    bullet
    Evaluation criteria for new modes of operation
     
     
     
     
  5. Other symmetric-key block ciphers
    bullet
    IDEA
    bullet
    RC5
    bullet
    Fast software encryption cryptoalgorithms
    bullet
    Minimal key lengths for symmetric-key ciphers


Up


PUBLIC KEY CRYPTOALGORITHMS
  1. RSA – Genesis, operation & security. Factorization records.

    2. bullet
    Genesis of RSA
    bullet
    RSA as a trapdoor one-way function
    bullet
    Factorization as a basis of the RSA security
    bullet
    factorization records
    bullet
    factoring big numbers using a distributed network of computers
    bullet
    RSA challenge
    bullet
    Recommended key sizes for the RSA cryptosystem
  2. RSA Implementation: Efficient encryption, decryption & key generation

    3. bullet
    Basic exponentiation algorithm
    bullet
    Using Chinese Remainder Theorem for fast exponentiation
    bullet
    Basic algorithms for multiplication and modular reduction in software
    bullet
    Basic architectures for multiplication and modular reduction in hardware
    bullet
    Dependence between the key size and the times of cryptographic transformation
    bullet
    Probabilistic tests for primality
    bullet
    Deterministic tests for primality
    bullet
    Constructing a random prime
    bullet
    Optimal Assymetric Encryption Padding

     

Up

SECURITY SERVICES
  1. Data integrity and authentication - two faces of the same problem. Hash functions and MACs

    2. bullet
    Requirements for secure hash functions.
    bullet
    Classification of hash functions.
    bullet
    Attacks against hash functions.
    bullet
    Standard and non-standard applications of hash functions.
    bullet
    digital signatures and authentication codes
    bullet
    virus detection
    bullet
    password storage
    bullet
    fast encryption
    bullet
    Families of hash function algorithms and their security
    bullet
    Requirements for Message Authentication Code (MAC).
    bullet
    Families of MACs and their security.
    bullet
    Authentication combined with confidentiality.


Up

 

CRYPTOGRAPHIC STANDARDS AND SECURE INTERNET PROTOCOLS

  1. American and international cryptographic standards

    2. bullet
    Standard organizations
    bullet
    Main groups of cryptographic standards:
    bullet
    federal standards
    bullet
    ANSI standards
    bullet
    informal industry standards
    bullet
    IEEE standards
    bullet
    ISO standards
    bullet
    Classical cryptography standards
    bullet
    Public-key cryptography standards
  2. Secure Internet Protocols

    3. bullet
    Secure electronic mail
    bullet
    S/MIME
    bullet
    Open PGP
    bullet
    Secure WWW
    bullet
    SSL
    bullet
    Secure payment card protocols
    bullet
    Secure virtual private networks
    bullet
    IPSec
  3. Export and import control of cryptographic devices
    4. bullet
    Evolution of the U.S. policy
    bullet
    Current U.S. regulations

Up