Upload File

chapter05 key exchange - asecuritysite.com · key exchange • forward secrecy(fs), which means...

  • Home
  • Documents
  • chapter05 key exchange - asecuritysite.com · Key Exchange • Forward secrecy(FS), which means that a comprise of the long-term keys will not compromise any previous session keys
15
Chapter 5: Key Exchange Diffie-Hellman Diffie-Hellman Weaknesses Passing Key Using Public Key Prof Bill Buchanan OBE http://asecuritysite.com/crypto05 http://asecuritysite.com/encryption

Upload: others

Post on 27-Jul-2020

2 views

Category:

Documents


0 download

Report

TRANSCRIPT

Page 1: chapter05 key exchange - asecuritysite.com · Key Exchange • Forward secrecy(FS), which means that a comprise of the long-term keys will not compromise any previous session keys

Chapter5:KeyExchange

Diffie-HellmanDiffie-HellmanWeaknessesPassingKeyUsingPublicKey

ProfBillBuchananOBEhttp://asecuritysite.com/crypto05http://asecuritysite.com/encryption

Page 2: chapter05 key exchange - asecuritysite.com · Key Exchange • Forward secrecy(FS), which means that a comprise of the long-term keys will not compromise any previous session keys
Page 3: chapter05 key exchange - asecuritysite.com · Key Exchange • Forward secrecy(FS), which means that a comprise of the long-term keys will not compromise any previous session keys
Page 4: chapter05 key exchange - asecuritysite.com · Key Exchange • Forward secrecy(FS), which means that a comprise of the long-term keys will not compromise any previous session keys

KeyExchange

• Forwardsecrecy (FS),whichmeansthatacompriseofthelong-termkeyswillnotcompromiseanyprevioussessionkeys.Aleakageofthepublickeyoftheserverwouldcauseallthesessionswhichusedthisspecificpublickeytobecompromised.FSthusaimstoovercomethisbymakingsurethatallthesessionskeyscouldnotbecompromised,eventhoughthelong-termkeywascompromised.

• Ephemeral.Withsomekeyexchangemethodsthesamekeywillbegeneratedifthesameparametersareusedoneitherside.Thiscancauseproblemsasanintrudercouldguessthekey,orevenwherethekeywasstaticandneverchanged.Withephemeralmethods,adifferentkeyisusedforeachconnection,and,again,theleakageofanylong-termwouldnotcausealltheassociatedsessionkeystobebreached.

Page 5: chapter05 key exchange - asecuritysite.com · Key Exchange • Forward secrecy(FS), which means that a comprise of the long-term keys will not compromise any previous session keys

Logs

Encry

ption

Author: Prof Bill Buchanan

BobAlice

Eve

AxAy

(Ax)y Axy

A(x+y)

John

John

Page 6: chapter05 key exchange - asecuritysite.com · Key Exchange • Forward secrecy(FS), which means that a comprise of the long-term keys will not compromise any previous session keys

Logs

Encry

ption

Author: Prof Bill Buchanan

BobAlice

Eve

Private key

Ax AY

yx AAgreed number

Random value Random value

AxAY

Page 7: chapter05 key exchange - asecuritysite.com · Key Exchange • Forward secrecy(FS), which means that a comprise of the long-term keys will not compromise any previous session keys

Logs

Encry

ption

Author: Prof Bill Buchanan

BobAlice

Eve

Ax AY

yx AAgreed number

Random value Random value

AxAY

(AY)x (Ax)y

Page 8: chapter05 key exchange - asecuritysite.com · Key Exchange • Forward secrecy(FS), which means that a comprise of the long-term keys will not compromise any previous session keys
Page 9: chapter05 key exchange - asecuritysite.com · Key Exchange • Forward secrecy(FS), which means that a comprise of the long-term keys will not compromise any previous session keys

Example

Page 10: chapter05 key exchange - asecuritysite.com · Key Exchange • Forward secrecy(FS), which means that a comprise of the long-term keys will not compromise any previous session keys

Diffie-HellmanGenerator

Y=Gx modpp 11Generator 2 3 4 5 6 7 8 9x g^xmodp g^xmodp g^xmodp g^xmodp g^xmodp g^xmodp g^xmodp g^xmodp

2 4 9 5 3 3 5 9 43 8 5 9 4 7 2 6 34 5 4 3 9 9 3 4 55 10 1 1 1 10 10 10 16 9 3 4 5 5 4 3 97 7 9 5 3 8 6 2 48 3 5 9 4 4 9 5 39 6 4 3 9 2 8 7 510 1 1 1 1 1 1 1 1

PickingG

Page 11: chapter05 key exchange - asecuritysite.com · Key Exchange • Forward secrecy(FS), which means that a comprise of the long-term keys will not compromise any previous session keys

Diffie-HellmanGeneration

• DHGroup5:1,536bitprime.

• DHGroup2:1,024bitprime.

• DHGroup1:768-bitprime.

C:\>openssl dhparam -outdhparams.pem 768–textC:\>typedhparams.pemDiffie-Hellman-Parameters:(768bit)prime:00:d0:37:c2:95:64:02:ea:12:2b:51:50:a2:84:6c:71:6a:3e:2c:a9:80:e2:65:b2:a5:ee:77:26:22:31:66:9e:fc:c8:09:94:e8:9d:f4:cd:bf:d2:37:b2:fb:b8:38:2c:87:28:38:dc:95:24:73:06:d3:d9:1f:af:78:01:10:6a:7e:56:4e:7b:ee:b4:8d:6b:4d:b5:9b:93:c6:f1:74:60:01:0d:96:7e:85:ca:b8:1f:f7:bc:43:b7:40:4d:4e:87:e3

generator:2(0x2)-----BEGINDHPARAMETERS-----MGYCYQDQN8KVZALqEitRUKKEbHFqPiypgOJlsqXudyYiMWae/MgJlOid9M2/0jey+7g4LIcoONyVJHMG09kfr3gBEGp+Vk577rSNa021m5PG8XRgAQ2WfoXKuB/3vEO3QE1Oh+MCAQI=-----ENDDHPARAMETERS-----

Page 12: chapter05 key exchange - asecuritysite.com · Key Exchange • Forward secrecy(FS), which means that a comprise of the long-term keys will not compromise any previous session keys

Diffie-HellmanWeaknesses

• In2015,apaperentitledImperfectForwardSecrecy:HowDiffie-HellmanFailsinPractice – showedthatitwasfairlyeasytoprecomputeonvaluesfortwopopularDiffie-Hellmanparameters(andwhichusetheDHE_EXPORTcipherset).

• Theresearchteamfoundthatonewasusedasadefaultinthearound7%oftheTop1millionwebsitesandwashardcodedintotheApachehttpd service.Overall,atthetime,itwasfoundthatover3%ofWebsiteswerestillusingthedefault.

• Diffie-Hellman-Parameters:(512bit)• prime:• 00:9f:db:8b:8a:00:45:44:f0:04:5f:17:37:d0:ba:• 2e:0b:27:4c:df:1a:9f:58:82:18:fb:43:53:16:a1:• 6e:37:41:71:fd:19:d8:d8:f3:7c:39:bf:86:3f:d6:• 0e:3e:30:06:80:a3:03:0c:6e:4c:37:57:d0:8f:70:• e6:aa:87:10:33• generator:2(0x2)

Page 13: chapter05 key exchange - asecuritysite.com · Key Exchange • Forward secrecy(FS), which means that a comprise of the long-term keys will not compromise any previous session keys
Page 14: chapter05 key exchange - asecuritysite.com · Key Exchange • Forward secrecy(FS), which means that a comprise of the long-term keys will not compromise any previous session keys

BobAlice

Alice sends Bob her public key

Bob creates a secret key and encrypts with

Alice’s public key

Public key

Private key

Alice decrypts with her private key

KeyExchangewithPublicKey

Page 15: chapter05 key exchange - asecuritysite.com · Key Exchange • Forward secrecy(FS), which means that a comprise of the long-term keys will not compromise any previous session keys

Chapter5:KeyExchange

Diffie-HellmanDiffie-HellmanWeaknessesPassingKeyUsingPublicKey

ProfBillBuchananOBEhttp://asecuritysite.com/crypto05http://asecuritysite.com/encryption


Proceedings of the 1st symposium Knowledge Exchange for ......1 Foreword Welcome to the first symposium on Knowledge Exchange for Young Scientists (KEYS) in Dar es Salaam, Tanzania,

Key Exchange – Diffie-Hellman – Symmetric crypto (KDC idea, Needham-Shroeder, Kerberos) – Asymmetric crypto – certificates Stolen keys recovery Group keys

Better Buildings Residential Network Peer Exchange Call ... · Keys to Successful Quality Assurance and Quality Control Programs \(101\) Keywords Better Buildings, Deparment of Energy,

10 Data Hiding and Obfuscation - Asecuritysite.com

CORE LIST OF COMPUTER ADAPTIVE …at.mo.gov/members/documents/CoreList.docx · Web viewBig Keys LX or Big Keys Plus Option of black keys, white keys, or multi-color keys (Qwerty or

Ransomware - asecuritysite.com · Types •Locker Ransomware. Locks the computer. •Crypto Ransomware. Requires decryption key. •Master Boot Record Ransomware. Attack MBR so that

Keys to Successful Online Learning Keys to Successful Online Learning Keys to Successful Online Learning Keys to Successful Online Learning Keys to Successful

Keys to Negative Accuracy Keys to Negative Accuracy

The New Brand Relationship by Robert Passikoff of Brand Keys - Presented at the Insight Innovation eXchange North America 2013

Better Buildings Residential Network Peer … Slide Better Buildings Residential Network Peer Exchange Call Series: Keys to Successful Quality Assurance and Quality Control Programs

PG-Keys: Keys for Property Graphs

Krazy Keys Services | Locksmith, Car Keys, Mobile Service

ch01 cyber and intelligence - Asecuritysite.com

Hot Keys / Short-cut Keys

Key Exchange Using Passwords and Long Keys Vladimir Kolesnikov Charles Rackoff Comp. Sci. University of Toronto

Metasploit - asecuritysite.com · Metasploit x Understand how a Pen Tester can generate vulnerabilities and test using the Metasploit framework . x Define the options and …

Lab 4: Asymmetric (Public) Key - Asecuritysite.com · 2019. 2. 10. · 3 Use the following command to view the keys: cat private.pem B.2 Use following command to view the output file:

Cryptography – SSL/TLS · • Public-key cryptography during initial handshake to authenticate and exchange session keys – PKI (X.509 Certificates) • Symmetric key cryptography

2017-2018 - Keys Energy Serviceskeysenergy.com/pdf/KEYS-Employee-Benefit-Highlights.pdf2 Keys Energy Services | Employee Benefit Highlights | 2017-2018 Introduction KEYS provides a

unit05 key exchange - asecuritysite.com · Key Exchange • Forward secrecy (FS), which means that a comprise of the long-term keys will not compromise any previous session keys

Provably Secure Password Authenticated Key Exchange Based ... · an AKE with which to establish other session keys (e.g. the protocols in [6]). In Password-Authenticated Key Exchange

Keys to the Keys

Chapter 3: Hashing - Asecuritysite.com · 2018. 10. 12. · Benchmark Benchmark Hashes “The quick brown fox jumps over the lazy dog: SHA-1: 2fd4e1c67a2d28fced849ee1bb76e7391b93eb12

Securities and Exchange Commission, Plaintiff, vs. Michael w. Perry and a. Scott Keys, Defendants

Topic Biological Keys Contents What is biological Key? Types of keys. Dichotomous Keys Polytomous Keys Example of Classification of Elephant Common problems

Public Keys and Private Keys Quantum Cryptographyshemer.mslib.huji.ac.il/dissertations/W/JMC/001486952.pdf · into two parts: quantum public keys and quantum private keys. Quantum

Intrusion Detection Systems - asecuritysite.com · Intrusion Detection Systems Introduction Threats Types Host or Network? Agent-based Snort A simple rule A few intrusions User profiling

Incident Response - asecuritysite.com · Incident Response Eve ... Snort. Intrusion Detection System Alice Cloud AWS Cloudtrail. Amazon S3. Azure. Application Serv Weblogic. WebSphere

litprintables preview - I'm Lovin' Lit...Answer Keys Lesson 1 101 Answer Keys Lesson 2 102 Answer Keys Lesson 3 103 Answer Keys Lesson 4 104 Answer Keys Lesson 5 105 Answer Keys Lesson

SX-200” DIGITAL PRIVATE AUTOMATIC BRANCH EXCHANGE …pdf.textfiles.com/manuals/TELECOM-F-R/Mitel SX-200D... · Speed Dial Keys 3.04 There are 12 Speed Dial keys located on the upper

Keys to the Future of Health Information Exchange€¦ · Keys to the Future of Health Information Exchange ... Objective 3C: Incorporate semantic interoperability into certification

Welcome To To Florida keys Florida keys FLORIDA KEYS A CORAL REEF ECOSYSTEM Florida keys is located 15 miles from Miami Florida keys is located 15 miles

Key Exchange Diffie -Hellman Symmetric crypto (KDC idea, Needham- Shroeder , Kerberos) Asymmetric crypto – certificates Stolen keys recovery Group keys

Building Scalable Security for Systems of Systems · 2020. 7. 15. · Securely exchange cryptographic keys 3. Use keys to: •Encrypt data •Add a message authentication code ©2019

Pengantar Teknologi Informasi · Keyboard Alphanumeric keys Function keys Modifier keys Cursor movement keys Numeric Pad keys