Chapter 15 – Electronic Mail Security密码编码学与 及网络安全：原理与 及实践 第四版英文课件.pptVIP

DKIM Strategy transparent to user MSA sign MDA verify for pragmatic reasons DCIM Functional Flow Summary have considered: secure email PGP S/MIME domain-keys identified email * Lecture slides by Lawrie Brown for “Cryptography and Network Security”, 5/e, by William Stallings, Chapter 18 – “Electronic Mail Security”. * Opening quote. * In virtually all distributed environments, electronic mail is the most heavily used network-based application. But current email services are roughly like postcards”, anyone who wants could pick it up and have a look as its in transit or sitting in the recipients mailbox. * With the explosively growing reliance on electronic mail for every conceivable purpose, there grows a demand for authentication and confidentiality services. What we want is something more akin to standard mail (contents protected inside an envelope) if not registered mail (have confidence about the sender of the mail and its contents). That is, the “classic” security services listed are desired. * The Pretty Good Privacy (PGP) secure email program, is a remarkable phenomenon, has grown explosively and is now widely used. Largely the effort of a single person, Phil Zimmermann, who selected the best available crypto algorithms to use integrated them into a single program, PGP provides a confidentiality and authentication service that can be used for electronic mail and file storage applications. It runs on a wide range of systems, in both free commercial versions. * The actual operation of PGP, as opposed to the management of keys, consists of four services: authentication, confidentiality, compression, and e-mail compatibility. Stallings Figure 18.1a illustrates the digital signature service provided by PGP. This is the digital signature scheme discussed in Chapter 13 and illustrated in Figure 13.2. The sequence is as listed. Note this assumes use of RSA digital signatures, created using the senders private key, and verified with the senders public key. Recent