4电子商务安全技术（缩减B版本).ppt

《电子商务》 湖南商学院计算机与电子工程系 stonebiao * 《电子商务》 湖南商学院计算机与电子工程系 stonebiao * 《电子商务》 湖南商学院计算机与电子工程系 stonebiao * 《电子商务》 湖南商学院计算机与电子工程系 stonebiao * Secret-key cryptography is a cost-effective and computer-efficient way to encrypt and decrypt information. The slide shows how secret-key cryptography is used in the computer environment. First, the key is used to encrypt the plain text. As cipher text, the encrypted message is routed across the network (for example, the Internet) to its destination. Upon arrival of the message, the recipient uses the same key to decrypt it. Secret-key cryptography has two serious drawbacks: The two parties may be known to each other only through communications over a network; therefore, they probably have no secure way to exchange the key. To assure security, each pair of correspondents needs a different secret key. This causes a horrendous key management problem. For example, a network of 10 people would require 45 different keys, a network of 100 people would require 4,950 different keys, a network of 1,000 people would need 499,500 keys, and so on. Clearly, it would be impractical for a company to maintain unique keys for numerous users. 《电子商务》 湖南商学院计算机与电子工程系 stonebiao * The difficulty of delivering the key and managing many keys led to the development of public-key cryptography. With public-key cryptography, each user has a public key and a private key. Anything encrypted by the public key can be decrypted only with the private key and vice versa. The private key is kept strictly confidential and is known only to the owner. The public key is widely known because it is published in a directory that is accessible by anyone who wishes to communicate with the key holder in a secure manner. For example, if Alice wants to send a confidential message to Bob, she obtains his public key from the directory, encrypts the message, and sends it to Bob. When Bob receives the encrypted message, he can decrypt it by using his private key. In