RE: integrity and mail encryption

From: Adrian Floarea (adrian.floarea_at_uti.ro)
Date: 11/04/05

  • Next message: jlopez2k5_at_gmail.com: "Re: Sender Spoofing via SMTP" 
    To: "'Pranav Lal'" <pranav.lal@gmail.com>, <security-basics@securityfocus.com>
Date: Fri, 4 Nov 2005 11:10:54 +0200

    In fact the public key digital signature provide non-repudiation which means
    that only the person which has the corresponding private key can make a
    digital signature. Shortly, the process is: you have a private key and a
    public key. The private key is secret. When you make a digital signature,
    first you make a hash of electronic data and after that, you encrypt this
    hash with your private key. When someone wants to verify your signature,
    make again the hash on the data, decrypt the original hash using your public
    key and after that, compare them. Because, you are the only person which has
    the private key, you can't deny that you are the person who make the
    original digital signature.

    Actually the process is much complicated, but the essence is that what I
    explain bottom.

    Regards,

    Security Product Team Leader
    Adrian Floarea, CISA
    Information Security Department
    Bucharest, Romania
    Email: adrian.floarea@uti.ro

     

    -----Original Message-----
    From: Pranav Lal [mailto:pranav.lal@gmail.com]
    Sent: Wednesday, November 02, 2005 11:21 PM
    To: security-basics@securityfocus.com
    Subject: RE: integrity and mail encryption

    Hi Bob,

    How does public key encryption provide non-repudiation

    Pranav

  • Next message: jlopez2k5_at_gmail.com: "Re: Sender Spoofing via SMTP"

    Relevant Pages

    • Re: very basic quextions: public key encryption
      ... is allowed to know your public key ... ... encode the secure hash with my private key. ... i combine the message and the digital signature ... ... possible to simply encrypt the data w/o a digital signature. ...
      (comp.security.ssh)
    • Re: Public/Private key pair protection on Windows
      ... > by Windows is erased when you are done using the private key, i.e., ... being able to execute transactions while the token is connected w/o ... where the relying party succesfully validating the digital signature ... hardware tokens can also be considered somewhat a ...
      (alt.computer.security)
    • RE: integrity and mail encryption
      ... you need a certification authority for that. ... How do you establish ownership of a private key? ... need a certifying authority to establish this so a public key ... In fact the public key digital signature provide non-repudiation which means ...
      (Security-Basics)
    • Re: private key encryption - doubts
      ... > Alice creates a one-way hash and encrypt it with her private key ... So Bob now knows the private key of Alice. ... > I need to know what exactly is a digital signature. ... same symmetric key for both encryption and decryption). ...
      (comp.security.ssh)
    • Re: Approval Question
      ... a digital signature is just a number which is ... - encrypt that hash with the author's private key; ...
      (microsoft.public.access.security)