RE: integrity and mail encryption

From: Andrew Chong (andrewjw_at_singnet.com.sg)
Date: 11/04/05

  • Next message: Adrian Floarea: "RE: integrity and mail encryption" 
    To: "'Pranav Lal'" <pranav.lal@gmail.com>, <security-basics@securityfocus.com>
Date: Fri, 4 Nov 2005 16:09:04 +0800

    To cut short the topics of asymmetric key and public key encryption, the
    common practice is to have a Certificate Authority (CA) which is a
    trusted third-party for Key Management and also for non-repudiation.
    One example is the common SSL certificates which are distributed by CA
    Verisign, baltimore, entrust etc.
    These CA are there to entrust the authenticity of the keys and digital
    certificates (look into X.508).

    This PKI book is worth to keep.
    Rethinking Public Key Infrastructure and Digital Certificates: Building
    in Privacy.
    http://www.sweetfantasy.biz/prod_details.aspx?AsinSearch=0262024918&type
    =heavy&f=xml

    Regards,
    Andrew Chong, cissp

    -----Original Message-----
    From: Pranav Lal [mailto:pranav.lal@gmail.com]
    Sent: Thursday, November 03, 2005 5:21 AM
    To: security-basics@securityfocus.com
    Subject: RE: integrity and mail encryption

    Hi Bob,

    How does public key encryption provide non-repudiation

    Pranav

  • Next message: Adrian Floarea: "RE: integrity and mail encryption"

    Relevant Pages

    • Re: PKI: the end
      ... The end of SSL, X.509 certificates, digital signature ... PKI is a business process that makes use of asymmetric key ... use of the "private key" are met, then a relying party may infer from ... use of the registered public key to verify a digital signature. ...
      (sci.crypt)
    • Re: General PKI Question
      ... > encrypt the message with the intended recipient's public key. ... digital signature authentication ... Certificates were somewhat the "letters of credit" analogy (from the ...
      (microsoft.public.security)
    • Re: X.509 and ssh
      ... was the eventual realization that certificates potentially grossly ... As essential, as the ID present when you conduct an in-person transaction, or get aboard an airplane. ... Or can I just write you a check for $100 and claim that a1b2c3d4 is my real public key / authentication code?? ... purpose of appending certificates to payment transactions was to ...
      (comp.security.ssh)
    • Re: Proposal for a new PKI model (At least I hope its new)
      ... CA/PKI scenario for SSL domain name certificates ... ... adequate authentication mechanism. ... the CA can retrieve the public key from the domain name ...
      (sci.crypt)
    • Re: What is a Certificate?
      ... > of a prevalent public key infrastructure for end users. ... > signed certificates (or certificates that cannot be verified by one ... keys that have to be loaded in the relying party's trusted public key ... where a relying party ...
      (comp.security.misc)