summaryrefslogtreecommitdiff
path: root/security/crypto
diff options
context:
space:
mode:
Diffstat (limited to 'security/crypto')
-rw-r--r--security/crypto/pres_crypto_en.tex6
-rw-r--r--security/crypto/pres_pki_en.tex39
2 files changed, 20 insertions, 25 deletions
diff --git a/security/crypto/pres_crypto_en.tex b/security/crypto/pres_crypto_en.tex
index feba1c5..560f4c9 100644
--- a/security/crypto/pres_crypto_en.tex
+++ b/security/crypto/pres_crypto_en.tex
@@ -189,6 +189,7 @@ corresponding bit in the following plaintext block
\begin{itemize}
\item Required only Block Encryption
\item Encryption and Decryption parallelizable
+\item En-/decryption can be prepared in advance
\item No padding required
\end{itemize}
\begin{figure}[h]
@@ -243,6 +244,11 @@ RN\subscript{s} and PMS
\begin{itemize}
\item OpenSSL: libcrypto and libssl \\
Implementations and Hardware support for most common algorithms
+\item LibreSSL \\
+ fork of openSSL
+\item mbedTLS \\
+ implementation for embedded systems \\
+ new name for PolarSSL
\item GnuTLS: GNU SSL/TLS implementation \\
Focus on TLS handshaking and protocol implementation
\item PKCS\#11 (API for Smartcard Slots and Tokens) \\
diff --git a/security/crypto/pres_pki_en.tex b/security/crypto/pres_pki_en.tex
index ff0133b..f385550 100644
--- a/security/crypto/pres_pki_en.tex
+++ b/security/crypto/pres_pki_en.tex
@@ -27,21 +27,21 @@
\begin{frame}
\frametitle{Roles}
\begin{itemize}
+\item Registration Authority
+ \begin{itemize}
+ \item Process Certificate Signing Requests
+ \item Ensure Clients Identity
+ \end{itemize}
\item Certificate Authority
-\begin{itemize}
-\item Issue CA-Certificate (CA Public Key)
-\item Sign Public Keys (with CA Private Key)
-\end{itemize}
+ \begin{itemize}
+ \item Issue CA-Certificate (CA Public Key)
+ \item Sign Certificates (with CA Private Key)
+ \end{itemize}
\item Validation Authority
-\begin{itemize}
-\item Provide signed Certificates
-\item Unique relation between Client and Certificate
-\end{itemize}
-\item Registration Authority
-\begin{itemize}
-\item Process Certificate Signing Requests
-\item Ensure Clients Identity
-\end{itemize}
+ \begin{itemize}
+ \item Confirm CA-signature of client certificate
+ \item Validate lifetime and revocation of client certificate
+ \end{itemize}
\end{itemize}
\end{frame}
@@ -93,17 +93,6 @@
\subsubsection{Workflows}
\begin{frame}
-\frametitle{Create CA-Certificate}
-\begin{itemize}
-\item Create Key-Pair
-\item Self-Sign Public Key
-\item opt: generate Certificate Signing Request for Root CA
-\item Send CA-Certificate to Directory Server and/or Validation Authority
-\end{itemize}
-\end{frame}
-
-% ----------------------------
-\begin{frame}
\frametitle{Process Client Certificate}
\begin{itemize}
\item Requester
@@ -141,7 +130,7 @@
\end{itemize}
\item Validation Authority
\begin{itemize}
-\item Retrieve Clients Certificate in Directory Server
+\item Retrieve CA Certificate in Directory Server
\item Check Certificate Revocation List
\item Validate Clients Certificate with CA-Certificate
\item Validate Signature with Clients Certificate