Cryptography - Revision history

Pio2pio: /* SSL and TLS */

2019-07-20T12:03:33Z

SSL and TLS

← Older revision		Revision as of 14:03, 20 July 2019
Line 42:		Line 42:

	<source>		<source>
	HTTP,FTP,SMTP ----- 7.Application		.HTTP,FTP,SMTP.----- 7.Application
	\| \| 6.Presentation		\| \| 6.Presentation
	\| \| 5.Session		\| \| 5.Session

Pio2pio: /* SSL and TLS */

2019-07-20T12:03:06Z

SSL and TLS

← Older revision		Revision as of 14:03, 20 July 2019
Line 35:		Line 35:

	= SSL and TLS =		= SSL and TLS =
	*SSL - Secure Socket Layer		*SSL - Secure Socket Layer, proprietary by Netscape
	*TLS - Transport Layer Security		*TLS - Transport Layer Security, open-standard, based on SSL created by IETF (Internet Engineering Task Force)

	Communication via SSL		Communication via SSL

Pio2pio: /* SSL and TLS */

2019-07-20T11:47:06Z

SSL and TLS

← Older revision		Revision as of 13:47, 20 July 2019
Line 50:		Line 50:
	1.Physical		1.Physical
	</source>		</source>


			SSL hybrid communication
			# Asymmetric Key Exchange
			** system-1 sends its Public key (Public Key Exchange) to system-2
			** system-1 generates session Symmetric key, then encrypts with Private key and sends to system-2
			** system-2 decrypts the Symmetric key with public keys of system-1
			# Symmetric Data Exchange session starts


			TLS Handshake or Public Key Exchange (PKE)
			:[[File:ClipCapIt-190720-124449.PNG]]

Pio2pio: /* SSL and TLS */

2019-07-20T11:20:25Z

SSL and TLS

← Older revision		Revision as of 13:20, 20 July 2019
Line 35:		Line 35:

	= SSL and TLS =		= SSL and TLS =
			*SSL - Secure Socket Layer
			*TLS - Transport Layer Security

	Communication via SSL		Communication via SSL
	'''FTP,SMTP, HTTP''' operate at Application Layer, but when we securing with '''SSL (SSL wrapper)''' we put cryptographic wrapper around the communication at the '''Transport Layer'''		'''FTP,SMTP, HTTP''' operate at Application Layer, but when we securing with '''SSL (SSL wrapper)''' we put cryptographic wrapper around the communication at the '''Transport Layer'''

Pio2pio: /* SSL and TLS */

2019-07-20T11:06:04Z

SSL and TLS

← Older revision		Revision as of 13:06, 20 July 2019
Line 39:		Line 39:

	<source>		<source>
	HTTP,FTP,SMTP ----- 7.Application		HTTP,FTP,SMTP ----- 7.Application
	6.Presentation		\| \| 6.Presentation
	5.Session		\| \| 5.Session
	SSL Wrapper ------ 4.Transport		\SSL Wrapper/ ----- 4.Transport
	3.Network		3.Network
	2.Data Link		2.Data Link
	1.Physical		1.Physical
	</source>		</source>

Pio2pio: /* Encryption protocols */

2019-07-20T11:02:53Z

Encryption protocols

← Older revision		Revision as of 13:02, 20 July 2019
Line 33:		Line 33:

	;Signing: if you sign anything with private key, the only way to verify the signature is to decrypt with the matching public key.		;Signing: if you sign anything with private key, the only way to verify the signature is to decrypt with the matching public key.

			= SSL and TLS =
			Communication via SSL
			'''FTP,SMTP, HTTP''' operate at Application Layer, but when we securing with '''SSL (SSL wrapper)''' we put cryptographic wrapper around the communication at the '''Transport Layer'''

			<source>
			HTTP,FTP,SMTP ----- 7.Application
			6.Presentation
			5.Session
			SSL Wrapper ------ 4.Transport
			3.Network
			2.Data Link
			1.Physical
			</source>

Pio2pio: /* Encryption protocols */

2019-07-20T10:55:10Z

Encryption protocols

← Older revision		Revision as of 12:55, 20 July 2019
Line 30:		Line 30:
	#Note, where needed the public key exchange happen, eg. via CA distribution process or protocol initialisation etc.		#Note, where needed the public key exchange happen, eg. via CA distribution process or protocol initialisation etc.
	</source>		</source>


			;Signing: if you sign anything with private key, the only way to verify the signature is to decrypt with the matching public key.

Pio2pio: Created page with "= Encryption protocols = {| class="wikitable" |+ Encryption algorythms |- ! Symmetric ! Asymmetric |- | * DES * 3DES * AES | * DH (Diffie-Helman) * RSA * ECC (Elliptic-curve..."

2019-07-20T10:53:01Z

Created page with "= Encryption protocols = {| class="wikitable" |+ Encryption algorythms |- ! Symmetric ! Asymmetric |- | * DES * 3DES * AES | * DH (Diffie-Helman) * RSA * ECC (Elliptic-curve..."

New page

= Encryption protocols =
{| class="wikitable"
|+ Encryption algorythms
|-
! Symmetric
! Asymmetric
|-
|
* DES
* 3DES
* AES
|
* DH (Diffie-Helman)
* RSA
* ECC (Elliptic-curve)
|}

<source>
. System-1 System-2
#Encryption decryption
download
[data encrypted] -----> [data decrypted]
- with public2 key - with private2 key

#Signing
[data encrypted] -----> [data decrypted]
- with public2 key - with private2 key
- signed with private1 key - verified signature with public1 key

#Note, where needed the public key exchange happen, eg. via CA distribution process or protocol initialisation etc.
</source>