Discuss the trustworthiness of root certificates provided by browsersWe have two users Hazem and Tamer, Hazem generates a random stream of bits using a random bit generator software and XORs bits with his key then send the results bits to Tamer over the network. Tamer XORs the received bits with his key (which suppose the same as Hazem’s key) and reply to Hazem with the results bits. Hazem compares the received bits from tamer with the original random bits. the comparison process to check whether the keys at the two sites are the same.as you noted in the previous protocol no keys are exchanged over network between Hazem and Tamerprove with details the steps that the values of the keys are the same at both users show by steps how can the opponent attack this schema to know the shared secret key

A Root Certificate is a component of a PKI (Public Key Infrastructure) and is responsible for…

Answered: Discuss the trustworthiness of root…

Engineering

Computer Science

Discuss the trustworthiness of root certificates provided by browsers

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter12: Protection Mechanisms

Section: Chapter Questions

Problem 3E

See similar textbooks

Similar questions

Alice wants to set up a business company that securely deals with her clients. Bob is a potential client that Alice wants to have a good connection. As a security consultant, your job is to devise a plan to establish a secure information exchange. The assumption is made that Alice and Bob already have their public and public keys; (PrivA, PubA) and (PrivB, PubB) respectively, and both of them have exchanged their public key beforehand. Your plan includes comprehensive protocols to secure all messages, according to Alice’s requirements below. Discuss your answers. i) Integrity: Alice and Bob want to make sure that every message sent cannot be forged by anyone. ii) Authenticity: Alice and Bob can verify that messages actually came from them iii) Confidentiality: Alice exchanges business-related documents with Bob in a way, so that Alice and Bob may open, read or modify the documents.
Alice wants to set up a business company that securely deals with her clients. Bob is a potential client that Alice wants to have a good connection. As a security consultant, your job is to devise a plan to establish a secure information exchange. The assumption is made that Alice and Bob already have their public and public keys; (PrivA, PubA) and (PrivB, PubB) respectively, and both of them have exchanged their public key beforehand. Your plan includes comprehensive protocols to secure all messages, according to Alice’s requirements below. Discuss following 3 in relation with Asymmetric Encryption . i) Integrity: Alice and Bob want to make sure that every message sent cannot be forged by anyone. ii) Authenticity: Alice and Bob can verify that messages actually came from iii) Confidentiality: Alice exchanges business-related documents with Bob in a way, so that Alice and Bob may open, read or modify the documents.
*****Please use the information provided in this question!***** Shared session key establishment using a Key Distribution Center (KDC). Using the following table, illustrate how Alice can initiate a secure session with Bob with the help of KDC. Here, KEKs are the long term key establishment keys used to transport the session keys across the network securely. Assume the encryption process to be as follows: Divide the key into two halves: LK and RK; Divide the plaintext into two halves: LT and RT; Then ciphertext= LC||RC where LC=LK XOR RT; and RC = RK XOR LT; where LC, RC, LT, and RT are each 4 bits; Plaintext and ciphertext are each 8 bits. For example, if plaintext=A7 (Hexa) and Key = 6D; then LC=6 ⊕ 7 = 0110 ⊕ 0111 = 0001 = 1 (Hexa); and RC = D ⊕ A = 1101 ⊕ 1010 = 0111 = 7 (Hexa); so Ciphertext = 17 (Hexa). To decryptt, it does the reverse operation: Given ciphertext of C=LC||RC, it finds plaintext T=LT||RT, by finding LT=RC ⊕ RK and RT = LC ⊕ LK. In the above example, LT = 7 ⊕D…
Alice receives an email, apparently signed using a PGP private key by Bob. she does not know Bob’s public key, but she knows and has signed the public keys of Carol and -Dave. Dave has signed the keys of Alice, Bob and Eve. Eve has signed Carols and Dave’s keys. Alice has “complete trust” in Dave, and “part trust” in carol and Eve. Should Alice accept the signature on Bob’s email? Explain your answer, specifying any assumptions you make about PGP.
*****Please use the information provided in this question!***** ***Only do C, please!*** Shared session key establishment using a Key Distribution Center (KDC). Using the following table, illustrate how Alice can initiate a secure session with Bob with the help of KDC. Here, KEKs are the long term key establishment keys used to transport the session keys across the network securely. Assume the encryption process to be as follows: Divide the key into two halves: LK and RK; Divide the plaintext into two halves: LT and RT; Then ciphertext= LC||RC where LC=LK XOR RT; and RC = RK XOR LT; where LC, RC, LT, and RT are each 4 bits; Plaintext and ciphertext are each 8 bits. For example, if plaintext=A7 (Hexa) and Key = 6D; then LC=6 ⊕ 7 = 0110 ⊕ 0111 = 0001 = 1 (Hexa); and RC = D ⊕ A = 1101 ⊕ 1010 = 0111 = 7 (Hexa); so Ciphertext = 17 (Hexa). To decryptt, it does the reverse operation: Given ciphertext of C=LC||RC, it finds plaintext T=LT||RT, by finding LT=RC ⊕ RK and RT = LC ⊕ LK. In the…
must answered ALL parts for upvote, as per chegg guidelines, up to four subparts may be answered: - what are two desirable properties of IV in network security? - a cryptographic hash function is used to provide confidentiality and integrity of a message, true or false? - when AES is used with the CBC mode, the size of an IV is 256 bit long, true or false?
Use the test below and write conclusion for in 200 words LLMNR Poisoning and SMB Relay Attacks. The Linked Local Multicast Name Resolution (LLMNR) is a technique used to identify a system when DNS fails to do so on local network. It sends out a multicast message to all systems listening on the local network and waits for a response. This tool utilizes username and NTLMv2 hash for verification of credentials. It’s an internal attack where impersonator can intercept and act as that host then gain usernames and hashes and crack weak passwords to utilize it for their exploits. Server Message Block (SMB) is used for sharing access to files, printers, serial ports, and other resources on a network. It was mainly used for Windows, however Linux and macOS also have components for connecting to SMB resources. In SMB relay attack, attackers capture valid authentication session and then relay it thereby obtaining access. Instead of cracking the hashes, attackers can relay these hashes for…
Is the network traffic traversing the IPSEC VPN encrypted using symmetric or asymmetric encryption? Explain the difference between these 2 methods. Compare 3 algorithms that could be used to encrypt the IPSEC VPN traffic. List the tests you will perform to verify that your security measures and VPN are functioning as expected. Ref:JNAA-JSEC-12.a_IG Chapter 7
Which of the following statements about Anonymity is CORRECT: A. Bitcoin is anonymous as it doesn't use any name at all. B. In the Bitcoin network, you can only create a limited number of addresses. C. Unlinkability means that if a user interacts with the system repeatedly, these different interactions should not be able to be tied to each other from the point of view of the adversary. D. The anonymity set of your transaction is the set of transactions without real identities.
This is one question Discuss how the asymmetric encryption algorithm can be used to achieve the following goals with the use of the following technical term abbreviations: pubKS—public-key-for-the-sender;pubKR—public-key-for-the-receiver;priKS—private-key-for-t -sender;priKR—private-key-for-the-receiver. .---you must use these term abbreviations, rather than their complete/long phrases in your solutions! 1.Authentication: the receiver knows that only the sender could have generated the message. 2.Secrecy: only the receiver can decrypt the message. 3.Authentication and secrecy: only the receiver can decrypt the message, and the receiver knows that only the sender could have generated the message.
Using your full name ABDULAI as the keyword in the application of Playfair cipher, perform an encryption of the following plaintext – THIS SEMEESTER IS A A VERY WONDERFUL SEMESTER INDEED AND IIT HAS ENDED VERY WELL. 2.Describe the functions of the various components found in the general model for securing a network
“Suppose you want to visit a controversial web site (for example, a political activist site) and you (1) don’t want to reveal your IP address to the Web site, (2) don’t want your local ISP (which may be your home or office ISP) to know that you are visiting the site, and (3) you don’t want your local ISP to see the data you are exchanging with the site. If you use the traditional approach of connecting directly to the Web site without any encryption, you fail on all three counts. Even if you use SSL, you fail on the first two counts: Your source IP address is presented to the web site in every datagram you send; and the destination address of every packet you send can easily be sniffed by your local ISP. To obtain privacy and anonymity, you can instead use a combination of a trusted proxy server and SSL. With this approach, you first make an SSL connection to the trusted proxy. You then send, into this SSL connection, an HTTP request for a page at the desired site. When the proxy…