Security Protocols and Cryptography: S/MIME, SSL, IPsec, Study notes of Cryptography and System Security

An overview of various security protocols and cryptographic algorithms used in secure communication systems. Topics include s/mime for secure email, ssl for secure www, and ipsec for virtual private networks (vpn). The document also discusses the cost of cryptography in the layer model of the internet and the competition of different security protocols.

Typology: Study notes

Pre 2010

Uploaded on 02/12/2009

koofers-user-qt2
koofers-user-qt2 🇺🇸

10 documents

1 / 4

Toggle sidebar

This page cannot be seen from the preview

Don't miss anything!

bg1
1
Security Protocols
ECE 646 - Lecture 14
Algorithms
(e.g., DES, AES, RSA)
Security mechanisms
(e.g., digital signatures)
Security protocols
(e.g., S-MIME, SSL, IPSec)
Secure Communication Systems
(e.g., DMS)
Cryptographic
component
Non-cryptographic
component
(communications,
administration,
OS security,
database security,
etc.)
100%
pf3
pf4

Partial preview of the text

Download Security Protocols and Cryptography: S/MIME, SSL, IPsec and more Study notes Cryptography and System Security in PDF only on Docsity!

Security Protocols

ECE 646 - Lecture 14

Algorithms

(e.g., DES, AES, RSA)

Security mechanisms

(e.g., digital signatures)

Security protocols

(e.g., S-MIME, SSL, IPSec)

Secure Communication Systems

(e.g., DMS)

Cryptographic component

Non-cryptographic component (communications, administration, OS security, database security, etc.)

Cost of cryptography in the layer model of the Internet

Application layer http, ftp, e-mail

Transport layer tcp, udp

Internet protocol layer ip

Network access layer ethernet, atm

Physical layer

S/MIME, PGP

SSL

IPsec

Cost of adding cryptography

S/MIME: Secure Electronic E-mail

  • work on the corresponding Internet standard started by IETF, 1997
  • multiple products using S/MIME (e.g., Netscape Communicator, Microsoft Outlook, etc.)
  • enables secure communication between e-mail programs from various companies

Competition: PGP (in the past also PEM, MOSS)

Cryptographic algorithms:

Triple DES, RC2-40 / RSA, D-H, DSA / SHA-1, MD

  • protocol developed by RSA Data Security, Inc. in cooperation with consortium of several big companies in 1995

IPsec: Virtual Private Networks (VPN)

Local network Security gateway

Internet

  • local networks may belong to the same or different organizations
  • security gateways may come from different vendors

Remote user

Local network

Local network

Security gateway

Security gateway

VPN = Economic alternative to networks based on leased lines

IPsec: Virtual Private Networks (VPN)

  • S/WAN ( Secure Wide Area Network ) interoperability test for products developed by various vendors, 1995
  • development by IETF ( Internet Engineering Task Force ) started in 1994, first IPSec version, RFC 1825-29, published in 1995
  • IPsec required in IPv6, optional w IPv

Algorithms: confidentiality: DES, Triple DES, AES, and others authentication: HMAC-MD5, HMAC-SHA- key agreement: IKE

Competition: PPTP (Microsoft)