lecture 22 network security cpe 401 / 601 computer network systems slides are modified from dave...
Post on 20-Dec-2015
219 views
TRANSCRIPT
![Page 1: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/1.jpg)
Lecture 22
Network Security
CPE 401 / 601Computer Network Systems
slides are modified from Dave Hollinger
![Page 2: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/2.jpg)
Terminology
Authentication: identifying someone (or something) reliably. Proving you are who you say you are.
Authorization: permission to access a resource.
Netprog: Security 2
![Page 3: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/3.jpg)
Terminology
Encryption: Scramble data so that only someone with a secret can make sense of the data.
Decryption: Descrambling encrypted data.
DES: Data Encryption Standard: secret key cryptographic function standardized by NBS (NIST).
Netprog: Security 3
![Page 4: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/4.jpg)
Terminology (cont.)
Secret Key Cryptography: a cryptographic scheme where the same key is used to encrypt and decrypt.
Public Key Cryptography: a cryptographic scheme where different keys are used for encryption and decryption.
Netprog: Security 4
![Page 5: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/5.jpg)
Terminology (more!)
Firewall: a network component that separates two networks and (typically) operates in the upper layers of the OSI reference model (Application layer).
Screening Router: a discriminating router that filters packets based on network layer (and sometimes transport layer) protocols and addresses.
Netprog: Security 5
![Page 6: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/6.jpg)
Unix Network Security
Some basic approaches:
1. Do nothing and assume requesting system is secure.
2. Require host to identify itself and trust users on known hosts.
3. Require a password (authentication) every time a service is requested.
Netprog: Security 6
![Page 7: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/7.jpg)
Traditional Unix Security (BSD) Based on option 2 – trust users on
trusted hosts. if the user has been authenticated by a
trusted host, we will trust the user.
Authentication of hosts based on IP address! (doesn’t deal with IP spoofing)
Netprog: Security 7
![Page 8: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/8.jpg)
Reserved Ports
Trust only clients coming from trusted hosts with source port less than 1024. Only root can bind to these ports.
We trust the host. The request is coming via a trusted service (a reserved port) on the host.
Netprog: Security 8
![Page 9: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/9.jpg)
Potential Problem
Anyone who knows the root password can replace trusted services.
Not all Operating Systems have a notion of root or reserved ports!
It’s easy to impersonate a host that is down.
Netprog: Security 9
![Page 10: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/10.jpg)
Services that use the BSD security model
lpd – line printing daemon.
rshd – remote execution.
rexec – another remote execution.
rlogin – remote login.
Netprog: Security 10
![Page 11: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/11.jpg)
BSD Config Files
/etc/hosts.equiv – list of trusted hosts.
/etc/hosts.lpd – trusted printing clients.
~/.rusers – user defined trusted hosts and users.
Netprog: Security 11
![Page 12: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/12.jpg)
lpd security
check client's address for reserved portand
check /etc/hosts.equiv for client IP
orcheck /etc/hosts.lpd for client IP
Netprog: Security 12
![Page 13: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/13.jpg)
rshd, rexecd, rlogind security
As part of a request for service a username is sent by the client.
The username must be valid on the server!
Netprog: Security 13
![Page 14: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/14.jpg)
rshd security
1. check client’s address for reserved port
if not a reserved port – reject request.
2. check for password entry on server for specified user.
if not a valid username – reject request.
Netprog: Security 14
![Page 15: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/15.jpg)
rshd security (cont.)
3. check /etc/hosts.equiv for client’s IP address.if found – process request.
4. check users ~/.rhosts for client's IP address.if found – process request, otherwise reject.
Netprog: Security 15
![Page 16: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/16.jpg)
rexecd security
client sends username and password to server as part of the request (plaintext).
1. check for password entry on server for user name.
2. encrypt password and check for match.
rexecd is rarely used!
Netprog: Security 16
![Page 17: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/17.jpg)
rlogind security
Just like rshd.
If trusted host (user) not found – prompts for a password.
Netprog: Security 17
![Page 18: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/18.jpg)
Special Cases
If username is root requests are treated as a special case:
look at /.rhosts
often disabled completely.
Netprog: Security 18
![Page 19: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/19.jpg)
TCP Wrapper
TCP wrapper is a simple system that provides some firewall-like functionality.
A single host (really just a few services) is isolated from the rest of the world.
Functionality includes logging of requests for service and access control.
Netprog: Security 19
![Page 20: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/20.jpg)
TCP Wrapper Picture
Netprog: Security 20
TCP basedServers
TCPPorts
The World
TCP wrapper
(tcpd)
Single Host
![Page 21: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/21.jpg)
tcpd
The tcpd daemon checks out incoming TCP connections before the real server gets the connection.
tcpd can find out source IP address and port number (authentication).
Netprog: Security 21
![Page 22: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/22.jpg)
tcpd (cont.)
A log message can be generated indicating the service name, client address and time of connection.
tcpd can use client addresses to authorize each service request.
Netprog: Security 22
![Page 23: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/23.jpg)
Typical tcpd setup
inetd (the ) is told to start tcpd instead of the real server.
tcpd checks out the client by calling getpeername on descriptor 0.
tcpd decides whether or not to start the real server (by calling exec).
Netprog: Security 23
![Page 24: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/24.jpg)
tcpd configuration
The configuration files for tcpd specify which hosts are allowed/denied which services.
Entire domains or IP networks can be permitted or denied easily.
tcpd can be told to perform RFC931 lookup to get a username.
Netprog: Security 24
![Page 25: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/25.jpg)
![Page 26: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/26.jpg)
Secret Key Cryptography
• Single key used to encrypt and decrypt.
• Key must be known by both parties.
• Assuming we live in a hostile environment (otherwise - why the need for cryptography?), it may be hard to share a secret key.
Netprog: Cryptgraphy 26
![Page 27: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/27.jpg)
Public Key Cryptography(a.k.a. asymmetric cryptography)• Relatively new field - 1975 (as far as we
know, the NSA is not talking).
• Each entity has 2 keys: private key (a secret) public key (well known).
Netprog: Cryptgraphy 27
![Page 28: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/28.jpg)
• Private keys are used for decrypting.
• Public keys are used for encrypting.
encryptionplaintext ciphertext
public key
decryptionciphertext plaintext
private key
Netprog: Cryptgraphy 28
Using Keys
![Page 29: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/29.jpg)
Digital Signature
• Public key cryptography is also used to provide digital signatures.
signingplaintext signed message
private key
verificationsigned message plaintext
public key
Netprog: Cryptgraphy 29
![Page 30: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/30.jpg)
Transmitting over an insecure channel.Alice wants to send Bob a private
message.
Apublic is Alice’s public key.
Aprivate is Alice’s private key.
Bpublic is Bob’s public key.
Bprivate is Bob’s private key.
Netprog: Cryptgraphy 30
![Page 31: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/31.jpg)
Netprog: Cryptgraphy 31
Hello Bob,Wanna get together?
AliceAlice BobBob
encrypt using Bpublic decrypt using Bprivate
![Page 32: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/32.jpg)
OK Alice,Your place or mine?
Netprog: Cryptgraphy 32
AliceAlice BobBob
decrypt using Aprivate encrypt using Apublic
![Page 33: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/33.jpg)
Bob’s Dilemma
• Nobody can read the message from Alice, but anyone could produce it.
• How does Bob know that the message was really sent from Alice?
• Bob may be comforted to know that only Alice can read his reply.
Netprog: Cryptgraphy 33
![Page 34: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/34.jpg)
Alice can sign her message!
• Alice can create a digital signature and prove she sent the message (or someone with knowledge of her private key).
• The signature can be a message digest encrypted with Aprivate.
Netprog: Cryptgraphy 34
![Page 35: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/35.jpg)
Message Digest
• Also known as “hash function” or “one-way transformation”.
• Transforms a message of any length and computes a fixed length string.
• We want it to be hard to guess what the message was given only the digest. Guessing is always possible.
Netprog: Cryptgraphy 35
![Page 36: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/36.jpg)
Alice’s Signature
• Alice feeds her original message through a hash function and encrypts the message digest with Aprivate.
• Bob can decrypt the message digest using Apublic.
• Bob can compute the message digest himself.
• If the 2 message digests are identical, Bob knows Alice sent the message.
Netprog: Cryptgraphy 36
![Page 37: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/37.jpg)
Netprog: Cryptgraphy 37
AliceAlice BobBob
Sign with Aprivate check signature using Apublic
encrypt using Bpublic decrypt using Bprivate
Revised Scheme
![Page 38: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/38.jpg)
Why the digest?
• Alice could just encrypt her name, and then Bob could decrypt it with Apublic.
• Why wouldn’t this be sufficient?
Netprog: Cryptgraphy 38
![Page 39: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/39.jpg)
Implications
• Suppose Alice denies she sent the message?
• Bob can prove that only someone with Alice’s key could have produced the message.
Netprog: Cryptgraphy 39
![Page 40: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/40.jpg)
Another possible problem
• Suppose Bill receives a message from Alice including a digital signature.
“meet me at the library tonight”
• Bill sends the same message to Joe so that it looks like the message came from Alice.
• Bill includes the digital signature from the message Alice sent to him.
• Joe is convinced Alice sent the message!
Netprog: Cryptgraphy 40
![Page 41: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/41.jpg)
Solution?
• Always start your messages with: Dear Bill,
• Create a digest from the encrypted message and sign that digest.
• There are many other schemes as well.
Netprog: Cryptgraphy 41
![Page 42: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/42.jpg)
Speed
• Secret key encryption/decryption algorithms are much faster than public key algorithms.
• Many times a combination is used: use public key cryptography to share a
secret key. use the secret key to encrypt the bulk of the
communication.
Netprog: Cryptgraphy 42
![Page 43: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/43.jpg)
Secure Protocols
• There are a growing number of applications for secure protocols: email electronic commerce electronic voting homework submission
Netprog: Cryptgraphy 43
![Page 44: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/44.jpg)
Secure Protocols
• Many application protocols include the use of cryptography as part of the application level protocol. The cryptographic scheme employed is part
of the protocol. If stronger cryptographic tools become
available we need to change the protocol.
Netprog: Cryptgraphy 44
![Page 45: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/45.jpg)
SSL and TLS
• Secure Sockets Layer (SSL) is a different approach - a new layer is added that provides a secure channel over a TCP only link.
• TLS is Transport Layer Security (IETF standard based on SSL).
Netprog: Cryptgraphy 45
![Page 46: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/46.jpg)
SSL layer
Netprog: Cryptgraphy 46
Application
SSL
TCP
IP
Application
SSL
TCP
IP
![Page 47: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/47.jpg)
Advantages of SSL/TLS
• Independent of application layer
• Includes support for negotiated encryption techniques. easy to add new techniques.
• Possible to switch encryption algorithms in the middle of a session.
Netprog: Cryptgraphy 47
![Page 48: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/48.jpg)
HTTPS Usage
• HTTPS is HTTP running over SSL. used for most secure web transactions. HTTPS server usually runs on port 443. Include notion of verification of server via a
certificate. Central trusted source of certificates.
Netprog: Cryptgraphy 48
![Page 49: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/49.jpg)
![Page 50: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/50.jpg)
Kerberos
• Part of project Athena (MIT).• Trusted 3rd party authentication
scheme.• Assumes that hosts are not trustworthy.• Requires that each client (each request
for service) prove it’s identity.• Does not require user to enter password
every time a service is requested!
Netprog: Kerberos 50
![Page 51: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/51.jpg)
Kerberos Design
• User must identify itself once at the beginning of a workstation session (login session).
• Passwords are never sent across the network in cleartext (or stored in memory)
Netprog: Kerberos 51
![Page 52: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/52.jpg)
Kerberos Design (cont.)
• Every user has a password.
• Every service has a password.
• The only entity that knows all the passwords is the Authentication Server.
Netprog: Kerberos 52
![Page 53: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/53.jpg)
Netprog: Kerberos 53
ServerServerServerServerServerServerServerServer
ServerServerServerServerServerServerServerServer
KerberosKerberosDatabaseDatabase
Ticket GrantingTicket Granting ServerServer
Ticket GrantingTicket Granting ServerServer
AuthenticationAuthentication ServerServer
AuthenticationAuthentication ServerServer
WorkstationWorkstationWorkstationWorkstation
Kerberos Key Distribution ServiceKerberos Key Distribution Service
![Page 54: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/54.jpg)
Secret Key Cryptography
• The encryption used by current Kerberos implementations is DES, although Kerberos V5 has hooks so that other algorithms can be used.
encryption plaintextciphertext
keyciphertext plaintext
decryption
Netprog: Kerberos 54
![Page 55: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/55.jpg)
Tickets
• Each request for a service requires a ticket.
• A ticket provides a single client with access to a single server.
Netprog: Kerberos 55
![Page 56: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/56.jpg)
Tickets (cont.)
• Tickets are dispensed by the “Ticket Granting Server” (TGS), which has knowledge of all the encryption keys.
• Tickets are meaningless to clients, they simply use them to gain access to servers.
Netprog: Kerberos 56
![Page 57: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/57.jpg)
Tickets (cont.)
• The TGS seals (encrypts) each ticket with the secret encryption key of the server.
• Sealed tickets can be sent safely over a network - only the server can make sense out of it.
• Each ticket has a limited lifetime (a few hours).
Netprog: Kerberos 57
![Page 58: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/58.jpg)
Ticket Contents
• Client name (user login name)
• Server name
• Client Host network address
• Session Key for Client/Server
• Ticket lifetime
• Creation timestamp
Netprog: Kerberos 58
![Page 59: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/59.jpg)
Session Key
• Random number that is specific to a session.
• Session Key is used to seal client requests to server.
• Session Key can be used to seal responses (application specific usage).
Netprog: Kerberos 59
![Page 60: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/60.jpg)
Authenticators
• Authenticators prove a client’s identity.
• Includes: Client user name. Client network address. Timestamp.
• Authenticators are sealed with a session key.
Netprog: Kerberos 60
![Page 61: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/61.jpg)
Bootstrap
• Each time a client wants to contact a server, it must first ask the 3rd party (TGS) for a ticket and session key.
• In order to request a ticket from the TGS, the client must already have a TG ticket and a session key for communicating with the TGS!
Netprog: Kerberos 61
![Page 62: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/62.jpg)
Authentication Server
• The client sends a plaintext request to the AS asking for a ticket it can use to talk to the TGS.
• REQUEST: login nameTGS name
Since this request contains only well-known names, it does not need to be sealed.
Netprog: Kerberos 62
![Page 63: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/63.jpg)
Authentication Server
• The AS finds the keys corresponding to the login name and the TGS name.
• The AS creates a ticket: login nameTGS name client network addressTGS session key
• The AS seals the ticket with the TGS secret key.
Netprog: Kerberos 63
![Page 64: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/64.jpg)
Authentication Server Response• The AS also creates a random session
key for the client and the TGS to use.• The session key and the sealed ticket
are sealed with the user (login name) secret key.
Netprog: Kerberos 64
TGS session key
Ticket:login nameTGS namenet addressTGS session key
Sealed with user keySealed with user key
Sealed with TGS keySealed with TGS key
![Page 65: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/65.jpg)
Accessing the TGS
• The client decrypts the message using the user’s password as the secret key.
• The client now has a session key and ticket that can be used to contact the TGS.
• The client cannot see inside the ticket, since the client does not know the TGS secret key.
Netprog: Kerberos 65
![Page 66: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/66.jpg)
Accessing a Server
• When a client wants to start using a server (service), the client must first obtain a ticket.
• The client composes a request to send to the TGS:
Netprog: Kerberos 66
TGS Ticket
Authenticator
Server Name
sealed withsealed withTGS keyTGS key
sealed withsession key
![Page 67: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/67.jpg)
TGS response
• The TGS decrypts the ticket using it’s secret key. Inside is the TGS session key.
• The TGS decrypts the Authenticator using the session key.
• The TGS check to make sure login names, client addresses and TGS server name are all OK.
• TGS makes sure the Authenticator is recent.
Netprog: Kerberos 67
![Page 68: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/68.jpg)
TGS Response
Once everything checks out - the TGS:
• builds a ticket for the client and requested server. The ticket is sealed with the server key.
• creates a session key
• seals the entire message with the TGS session key and sends it to the client.
Netprog: Kerberos 68
![Page 69: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/69.jpg)
Client accesses Server
• The client now decrypts the TGS response using the TGS session key.
• The client now has a session key for use with the new server, and a ticket to use with that server.
• The client can contact the new server using the same format used to access the TGS.
Netprog: Kerberos 69
![Page 70: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/70.jpg)
Kerberos Summary
• Every service request needs a ticket.• Tickets come from the TGS (except the
ticket for the TGS!).• Workstations cannot understand tickets,
they are encrypted using the server key.
• Every ticket has an associated session key.
• Tickets are reusable.
Netprog: Kerberos 70
![Page 71: Lecture 22 Network Security CPE 401 / 601 Computer Network Systems slides are modified from Dave Hollinger](https://reader030.vdocument.in/reader030/viewer/2022032800/56649d455503460f94a22588/html5/thumbnails/71.jpg)
Kerberos Summary (cont.)
• Tickets have a finite lifetime.
• Authenticators are only used once (new connection to a server).
• Authenticators expire fast !
• Server maintains list of authenticators (prevent stolen authenticators).
• There is a lot more to Kerberos!!!
Netprog: Kerberos 71