CASP CAS-004

Protects Confidentiality, Integrity, Authenticity, and Non-Repudiation. Prevent unauthorized disclosure of information.

Privacy. Threats to Confidentiality: Social Engineering and Media Reuse.

Spear PhishingWhaling

Degauss magnetic media, destroy hard drives.

Protocol Analyzer or Packet Sniffer

Distinct roles. Sys Admin, Network Team, Active Directory.

Only the knowledge/privileges to complete you job/duties.

Verify the origin of the message.

Protects Integrity and Authenticity. Requires PKI infrastructure.

Protects Integrity and Authenticity. Detects Intentional Modification.

Modification- Accidental or Intentional

Detect accidental modification.One way math function.

160 bit hash

Protects Integrity and Authenticity. Detects Intentional Modification. Takes the message + symmetric key + hashing algorithm.

Protects Integrity and Authenticity. Requires PKI infrastructure.

A combination of Integrity and strong Authenticity. A sender cannot dispute the message was sent nor the contents of the message.

Plain Text+Initialization Vector+Algorithm+Key=Cipher Text.An IV is not always used. Used for sudo randomness. Key (Crypto Variable)= The instructions on how the algorithm is used.Kerckhoff's Principal-He said algorithms should be open.

Other names = Private Key, Secret Key, Shared Key, or Session KeyPros: FastCons: No means for key distribution.Not scalableNo Authenticity, Integrity, or Non-repudiation

Chunk data in to 64/128/256 bit blocks.Block ciphers are slower but more secure.Each block goes through a series of math functions.Confusion = Complex math for substitution.Diffusion = Permutation/Rounds

128/192/256 bit key.More processor friendly than 3DES

48 RoundsNot very efficient.

16 Rounds

Two keys issued to each user: Public and Private key.Provides key exchange, scalability, and non-repudiation.Cons: slow--------------------------------------------------------Privacy/Confidentiality: Always encrypts with the receivers public key. Receiver decrypts with receivers private key which only the receiver has.Authenticity: Sender encrypts with senders private key. When the receiver is able to decrypt with senders public key, that proves it was encrypted with the senders private key which only the sender has.Integrity: Create a message digest(Hash) with a hashing algorithm (MD5, SHA-1, SHA-256). Non-repudiation: Sender encrypts hash with senders private key. Receiver decrypts hash with senders public key. Receiver hashes document-if hashes match, receiver has a guarantee that the message has not been modified. This is called a digital signature.

Instruction on how to use the algorithm

keeping secrets, secret

The ability to detect modification within a system

providing timely access to resources