CSCU Module 04 Data Encryption PDF

Data Encryption
Module 4
Simplifying Security.
CopyrightbyEC-Council
AllRightsReserved.ReproductionisStrictlyProhibited.
May23,2011
40PercentofITWorkersCouldHoldEmployerNetworksHostage,SurveyFinds
Roughly40percentofITworkersbelievetheycouldholdanemployersnetworkhostage evenafter
leavingthecompany bywithholdingorhidingencryptionkeys,accordingtoarecentsurveyof500
ITsecurityspecialists.
Thestudy,releasedMonday,May23,alsorevealedthatathirdofsurveyrespondentswereconfident
thattheirknowledgeandaccesstoencryptionkeysandcertificatescouldbringacompanytoahalt
withlittleeffort.ConductedinApril2011,thesurveywassanctionedbyVenafi,anetworkkeyand
encryptionprovider.
Itsashamethatsomanypeoplehavebeensold
encryptionbutnotthemeansorknowledgeto
manageit,saidJeffHudson,CEOofVenafi,ina
statement.ITdepartmentsmusttrackwherethe
keysareandmonitorandmanagewhohasaccesstothem....Itsnolongerrocketscience.Yetrecent,
costlybreachesatSony,Epsilonandelsewherereinforcetheneedforbothmoreencryptionand
effectivemanagement.
http://www.govtech.com
Module Objectives
CommonTerminologies
UsageofEncryption
WhatIsEncryption?
DigitalCertificates
ObjectivesofEncryption
WorkingofDigitalCertificates
TypesofEncryption
DigitalSignature
EncryptionStandards
HowDigitalSignatureWorks?
Symmetricvs.Asymmetric
Encryption
CryptographyTools
Module Flow
Encryption
Typesof
Encryption
Encryption
Standards
Digital
Certificates
Digital
Signature
Cryptography
Tools
Common Terminologies
Plaintext
Plaintextorcleartext isunencryptedreadabletext
Cipher Text
Ciphertextisencryptedandunreadable untilitisdecryptedto
plaintextwithakey
Encryption Key
Anencryptionkeyisapieceofinformationthatisusedto
encrypt anddecrypt data
What Is Encryption?
Encryptionistheprocessofconvertingdataintoaciphertextthatcannotbe
understoodbytheunauthorizedpeople
Toreadanencryptedfile,youmusthaveaccess toasecretkeyorpasswordthat
enablesyoutodecryptit
Encryptionisusedtoprotectsensitiveinformation duringtransmissionandstorage
Bob
Plaintext
(Morpheus)
EncryptedDATA
(3*.,~@!w9)
EncryptedDATAis
receivedbyAlice
Alicereceivesthe
plaindataafter
decryption
Alice
Objectives of Encryption
DataIntegrity
Authentication
Thereceiverofamessagecancheckwhetherthemessage
wasmodifiedduringtransmission,eitheraccidentallyor
deliberately
Thereceiverofamessagecanverifytheoriginofthemessage
Nootherusershouldbeabletosendamessagetothe
recipientastheoriginalsender(dataoriginauthentication)
Nonrepudiation
Thesenderofamessagecannotdeny thathe/shehassent
themessage
Usage of Encryption
Ithelpstosafelystore
sensitiveinformationona
computerorexternalstorage
media
Encryptionisusedtoprotect
usercredentials suchasuser
nameandpasswords
Encryptionprovidesasecure
medium foruserstoconnect
totheirfriendsoremployees
networkfromoutsideofthe
homeoroffice
Itprovidesahigherlevelof
trust whenreceivingfilesfrom
otherusersbyensuringthatthe
sourceandcontentsofthe
messagearetrusted
Itisalsousedasaresource
forwebbasedinformation
exchangetoprotect
importantinformation such
ascreditcardnumbers
Encryptionprovides
assurance ofasenders
identity
Module Flow
Encryption
Typesof
Encryption
Encryption
Standards
Digital
Certificates
Digital
Signature
Cryptography
Tools
Types of Encryption
SymmetricEncryption
SymmetricEncryption
Encryption
DearJohn,
Thisismy
A/Cnumber
7974392830
Symmetricencryption(secretkey,sharedkey,
andprivatekey)usesthesamekeyfor
encryptionanddecryption
Plaintext
Decryption
Guuihifhofn
kbifkfnnfk
Nklclmlm
#^*&(*)_(_
DearJohn,
Thisismy
A/Cnumber
7974392830
Ciphertext
Plaintext
AsymmetricEncryption
Decryption
Encryption
Asymmetricencryption(publickey)uses
differentencryptionkeysforencryptionand
decryption.Thesekeysareknownaspublic
andprivatekeys
DearJohn,
Thisismy
A/Cnumber
7974392830
Guuihifhofn
kbifkfnnfk
Nklclmlm
#^*&(*)_(_
Plaintext
Ciphertext
DearJohn,
Thisismy
A/Cnumber
7974392830
Plaintext
Hashfunction
HashFunction
Hashfunction(messagedigestsoroneway
encryption)usesnokeyforencryptionand
decryption
Hashfunction
Plaintext
10
Ciphertext
Symmetric vs. Asymmetric Encryption

SymmetricEncryption
Symmetricencryptionusesonlyonekey
forbothencryptionanddecryption
Thekeycannotbeshared freely
AsymmetricEncryptionusesapublickey
forencryptionandaprivatekey for
decryption
Symmetricencryptionrequiresthatboth
thesenderandthereceiverknowthe
secretkey
Inasymmetricencryption,thepublickey
canbefreelyshared, whicheliminatesthe
riskofcompromisingthesecretkey
Usingsymmetricencryption,datacan
be encryptedfaster
TheencryptionprocessusingAsymmetric
Encryptionisslowerandmorecomplex
Thisalgorithmislesscomplexandfaster
Asymmetricencryptionensures
confidentiality,integrity,authentication,
andnonrepudiation
Symmetricencryptionensures
confidentialityandintegrity
11
Module Flow
Encryption
Typesof
Encryption
Encryption
Standards
Digital
Certificates
Digital
Signature
Cryptography
Tools
12
Encryption Standards
DataEncryption
Standard(DES)
AdvancedEncryption
Standard(AES)
DataEncryptionStandard(DES)isthename
oftheFederalinformationProcessing
Standard(FIPS)463,whichdescribesthe
dataencryptionalgorithm(DEA)
AdvancedEncryptionStandard(AES)is
asymmetrickeyencryptionstandard
adoptedbytheU.S.government
TheDEAisasymmetriccryptosystem
originallydesignedforimplementationin
hardware
Ithasa128bit blocksize,withkey
sizesof128,192and256bits,
respectively,forAES128,AES192and
AES256
DEAisalsousedforsingleuserencryption,
suchastostorefilesonaharddiskin
encryptedform
13
Module Flow
Encryption
Typesof
Encryption
Encryption
Standards
Digital
Certificates
Digital
Signature
Cryptography
Tools
14
Digital Certificates
Adigitalcertificateisanelectroniccardthatprovidescredentialinformationwhile
performingonlinetransactions
Itactsasanelectroniccounterparttoadrivers license,passport,ormembership
cardandverifiestheidentityofallusersinvolvedinonlinetransactions
Adigitalcertificategenerallycontains:
Detailsofownerspublickey
Ownersname
Digitalsignatureofthe
CA(issuer)
Expirationdateof
publickey
NameoftheCertificate
Authority(CA)whoissuedthe
digitalcertificate
Serialnumberofdigital
signature
15
How Digital Certificates Work

Certification
Authority(CA)
Validation
Authority(VA)
UpdatesInformation
RequestforIssuing
Certificate
PublicKey
Certificate
PublicKey
Certificate
Registration
Authority(RA)
Determined
Result
UserAppliesfor
Certificate
User
Messageinpublickeycertificate
signedwithdigitalsignature
PublicKey
Validationofelectronicsignature
PrivateKey
Inquiresaboutpublickeycertificate
validitytovalidationauthority
16
Module Flow
Encryption
Typesof
Encryption
Encryption
Standards
Digital
Certificates
Digital
Signature
Cryptography
Tools
17
Digital Signature
Digitalsignatureimplementsasymmetriccryptographytosimulatethesecurity
propertiesofasignatureindigital,ratherthanwrittenform
Digitalsignatureschemesinvolvetwoencryptionkeys:aprivatekeyforsigningthe
messageandapublickeyforverifyingsignatures
Digitalstandardsfollowtheopenstandards astheyarenottiedtoanindividualor
manufacturer
Itisoftenusedtoimplementelectronicsignatures andcanbeusedbyanytypeof
message
Itisindependentofthesignature verificationbetweenthesenderandthereceiver
18
How Digital Signature Works

SIGN
Confidential
Information
Hashvalue
ACCEPT
Appendthesigned
hashcodetomessage
Sendersignshashcodeusing
hisPRIVATEkey
SEAL
Encryptmessageusing
onetimesymmetrickey
OPEN
Encryptthesymmetrickey
usingrecipientsPUBLICkey
Decryptmessageusing
onetimesymmetrickey
Recipientdecryptonetimesymmetric
keyusinghisPRIVATEkey
VERIFY
DELIVER
Mailelectronicenvelopes
totherecipient
Unlockthehashvalueusing
sendersPUBLICkey
19
Rehash the
message and
compare it
with the hash
value attached
with the mail
Module Flow
Encryption
Typesof
Encryption
Encryption
Standards
Digital
Certificates
Digital
Signature
Cryptography
Tools
20
Cryptography Tool: TrueCrypt

TrueCryptcreatesavirtualencrypteddiskwithina
fileandmountsitasarealdisk
Encryptsanentirepartitionorstoragedevicesuch
asUSBflashdriveorharddrive
Encryptsapartitionordrive whereWindowsis
installed(prebootauthentication)
Encryptionisautomatic,realtime(onthefly),and
transparent
http://www.truecrypt.org
21
Cryptography Tools
FolderLock
PixelCryptor
http://www.newsoftwares.net
http://www.codegazer.com
AxCrypt
EncryptOnClick
http://www.axantum.com
http://www.2brightsparks.com
Cryptainer LE
SafeHouse Explorer
http://www.cypherix.co.uk
http://www.safehousesoftware.com
AdvancedEncryptionPackage
Kruptos 2Professional
http://www.intercrypto.com
http://www.kruptos2.co.uk
22
Module Summary
Encryptionistheprocessofconvertingdataintoaciphertextthatcannotbeunderstood
bytheunauthorizedpeople
Symmetricencryptionusesonlyonekeyforbothencryptionanddecryption,whereas
asymmetricencryptionusesapublickeyforencryptionandaprivatekeyfordecryption
Encryptionprovidesahigherleveloftrustwhenreceivingfilesfromotherusersby
ensuringthatthesourceandcontentsofthemessagearetrusted
Adigitalcertificateisanelectroniccardthatprovidescredentialinformationwhen
performingonlinetransactions
Adigitalsignatureimplementsasymmetriccryptographytosimulatethesecurity
propertiesofasignatureindigital,ratherthanwrittenform
23

CSCU Module 04 Data Encryption PDF

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

CSCU Module 04 Data Encryption PDF

Uploaded by

Copyright:

Available Formats

Data Encryption

Symmetric vs. Asymmetric Encryption

How Digital Certificates Work

How Digital Signature Works

Cryptography Tool: TrueCrypt

You might also like