Chap 7的 Confidentiality using symmetric encryption In.pptVIP

Chap. 7: Confidentiality using symmetric encryption Introduction to public-key cryptosystems Jen-Chang Liu, 2004 Adapted from Lecture slides by Lawrie Brown Amongst the tribes of Central Australia every man, woman, and child has a secret or sacred name which is bestowed by the older men upon him or her soon after birth, and which is known to none but the fully initiated members of the group. The secret name is never mentioned …The native thinks that a stranger knowing his secret name would have special power to work him ill by means of magic. -The Golden Bough, Sir James George Frazer Motivation and outline symmetric encryption is used to provide message confidentiality Q: Where to put the encryption mechanism? How to distribute the secret key? Placement of encryption function Traffic confidentiality Key distribution Confidentiality using Symmetric Encryption 機密性 What to encrypt and where the encryption function should be located consider typical scenario: Typical scenario and attacks consider typical scenario workstations on LANs access other workstations servers on LAN LANs interconnected using switches/routers with external lines or radio/satellite links consider attacks and placement in this scenario snooping from another workstation use dial-in to LAN or server to snoop use external router link to enter snoop monitor and/or modify traffic one external links Placement of encryption have two major placement alternatives link encryption encryption occurs independently on every link implies must decrypt traffic between links requires many devices, but paired keys for all links end-to-end encryption encryption occurs between original source and final destination need devices at each end with shared keys Placement of encryption (cont.) Problems with routing In a packet-switching network, we need packet header to route packets Link encryption: so packet must be decrypted before routing Vulnerable at each switch node End-to-end encryption: must leave he