Chapter 13Network Security.ppt

Chapter 13 Network Security Data Communications and Computer Networks Chapter 13 Triple-DES A more powerful data encryption standard. Data is encrypted using DES three times: the first time by the first key, the second time by a second key, and the third time by the first key again. (Can also have 3 unique keys.) While virtually unbreakable, triple-DES is CPU intensive. With more smart cards, cell phones, and PDAs, a faster (and smaller) piece of code is highly desirable. Data Communications and Computer Networks Chapter 13 Advanced Encryption Standard (AES) Selected by the U.S. government to replace DES. National Institute of Standards and Technology selected the algorithm Rijndael (pronounced rain-doll) in October 2000 as the basis for AES. AES has more elegant mathematical formulas, requires only one pass, and was designed to be fast, unbreakable, and able to support even the smallest computing device. Data Communications and Computer Networks Chapter 13 Advanced Encryption Standard (AES) Key size of AES: 128, 192, or 256 bits Estimated time to crack (assuming a machine could crack a DES key in 1 second) : 149 trillion years Very fast execution with very good use of resources AES should be widely implemented by 2004 Data Communications and Computer Networks Chapter 13 Digital Signatures Document to be signed is sent through a complex mathematical computation that generates a hash. Hash is encoded with the owner’s private key then stored. To prove future ownership, stored hash is decoded using the owner’s public key and that hash is compared with a current hash of the document. If the two hashes agree, the document belongs to the owner. The U.S. has just approved legislation to accept digitally signed documents as legal proof. Data Communications and Computer Networks Chapter 13 Public Key Infrastructure The combination of encryption