E-mail SecurityPGP and SMIME.ppt

E-mail Security:PGP and S/MIME Outline PGP services message format key management trust management S/MIME services message formats key management What is PGP? PGP - Pretty Good Privacy general purpose application to protect (encrypt and/or sign) files can be used to protect e-mail messages can be used by corporations as well as individuals based on strong cryptographic algorithms (IDEA, RSA, SHA-1) available free of charge at first version developed by Phil Zimmermann PGP is now on an Internet standards track (RFC 3156) PGP services messages authentication confidentiality compression e-mail compatibility segmentation and reassembly key management generation, distribution, and revocation of public/private keys generation and transport of session keys and IVs Message authentication based on digital signatures supported algorithms: RSA/SHA and DSS/SHA Message confidentiality symmetric key encryption in CFB mode with a random session key and IV session key and IV is encrypted with the public key of the receiver supported algorithms: symmetric: CAST, IDEA, 3DES asymmetric: RSA, ElGamal Compression applied after the signature enough to store clear message and signature for later verification it would be possible to dynamically compress messages before signature verification, but … then all PGP implementations should use the same compression algorithm however, different PGP versions use slightly different compression algorithms applied before encryption compression reduces redundancy ? makes cryptanalysis harder supported algorithm: ZIP E-mail compatibility encrypted messages and signatures may contain arbitrary octets most e-mail systems support only ASCII characters PGP converts an arbitrary binary stream into a stream of printable ASCII characters radix 64 conversion: 3 8-bit blocks ? 4 6-bit blocks Combining services PGP message format Key IDs a user may have several public key – private key pairs which private key to use to decrypt the session key? which publi