Cryptography

9.

Applied Cryptography and Security Protocols

9.1.

Network Security Protocols

9.1.1.

Transport Layer Security

9.1.1.1.

TLS Protocol Architecture

9.1.1.1.1.

Record Protocol

9.1.1.1.2.

Handshake Protocol

9.1.1.1.3.

9.1.1.1.4.

Application Data Protocol

9.1.1.2.

TLS Handshake Process

9.1.1.2.1.

ClientHello Message

9.1.1.2.2.

ServerHello Message

9.1.1.2.3.

Certificate Exchange

9.1.1.2.4.

9.1.1.2.5.

Finished Messages

9.1.1.3.

TLS Record Protocol

9.1.1.3.1.

9.1.1.3.2.

9.1.1.3.3.

MAC Computation

9.1.1.3.4.

9.1.1.4.

9.1.1.4.1.

Key Exchange Algorithms

9.1.1.4.2.

Authentication Algorithms

9.1.1.4.3.

Bulk Encryption Algorithms

9.1.1.4.4.

9.1.1.4.5.

Cipher Suite Selection

9.1.1.5.

9.1.1.5.1.

Server Name Indication

9.1.1.5.2.

Application Layer Protocol Negotiation

9.1.1.5.3.

Extended Master Secret

9.1.1.6.

9.1.1.6.1.

SSL 2.0 and 3.0

9.1.1.6.2.

9.1.1.6.3.

9.1.1.6.4.

9.1.1.6.5.

9.1.1.6.6.

Version Negotiation

9.1.1.7.

Perfect Forward Secrecy

9.1.1.7.1.

Ephemeral Key Exchange

9.1.1.7.2.

9.1.1.7.3.

Security Benefits

9.1.1.8.

TLS Security Considerations

9.1.1.8.1.

Certificate Validation

9.1.1.8.2.

Cipher Suite Security

9.1.1.8.3.

Implementation Vulnerabilities

9.1.2.

Internet Protocol Security

9.1.2.1.

IPsec Architecture

9.1.2.1.1.

Security Associations

9.1.2.1.2.

Security Policy Database

9.1.2.1.3.

Security Association Database

9.1.2.2.

IPsec Protocols

9.1.2.2.1.

Authentication Header

9.1.2.2.1.1.

Integrity Protection

9.1.2.2.1.2.

9.1.2.2.1.3.

Anti-replay Protection

9.1.2.2.2.

Encapsulating Security Payload

9.1.2.2.2.1.

Confidentiality

9.1.2.2.2.2.

9.1.2.2.2.3.

9.1.2.3.

9.1.2.3.1.

9.1.2.3.2.

9.1.2.3.3.

Mode Selection Criteria

9.1.2.4.

Internet Key Exchange

9.1.2.4.1.

9.1.2.4.2.

9.1.2.4.3.

9.1.2.4.4.

Perfect Forward Secrecy

9.1.2.5.

IPsec Applications

9.1.2.5.1.

VPN Implementation

9.1.2.5.2.

Site-to-Site Connectivity

9.1.2.5.3.

9.1.3.

Secure Shell Protocol

9.1.3.1.

SSH Protocol Architecture

9.1.3.1.1.

Transport Layer Protocol

9.1.3.1.2.

User Authentication Protocol

9.1.3.1.3.

Connection Protocol

9.1.3.2.

SSH Key Exchange

9.1.3.2.1.

Diffie-Hellman Key Exchange

9.1.3.2.2.

Host Key Verification

9.1.3.2.3.

Session Key Derivation

9.1.3.3.

SSH Authentication Methods

9.1.3.3.1.

Password Authentication

9.1.3.3.2.

Public Key Authentication

9.1.3.3.3.

Host-based Authentication

9.1.3.3.4.

Keyboard-Interactive Authentication

9.1.3.4.

SSH Applications

9.1.3.4.1.

Remote Shell Access

9.1.3.4.2.

9.1.3.4.3.

Port Forwarding

9.1.3.4.4.

9.2.

9.2.1.

Pretty Good Privacy

9.2.1.1.

PGP Architecture

9.2.1.1.1.

9.2.1.1.2.

9.2.1.1.3.

Message Processing

9.2.1.2.

9.2.1.2.1.

Digital Signatures

9.2.1.2.2.

9.2.1.2.3.

9.2.1.2.4.

Radix-64 Encoding

9.2.1.3.

OpenPGP Standard

9.2.1.3.1.

9.2.1.3.2.

9.2.1.3.3.

Interoperability

9.2.2.

9.2.2.1.

S/MIME Architecture

9.2.2.2.

Certificate-based Trust

9.2.2.3.

Message Security Services

9.2.2.4.

Integration with Email Clients

9.2.3.

Email Security Considerations

9.2.3.1.

Key Distribution

9.2.3.2.

Certificate Management

9.2.3.3.

Usability Challenges

9.3.

Wireless Security

9.3.1.

Wi-Fi Security Protocols

9.3.1.1.

Wired Equivalent Privacy

9.3.1.1.1.

RC4 Stream Cipher

9.3.1.1.2.

CRC-32 Integrity Check

9.3.1.1.3.

Security Vulnerabilities

9.3.1.1.4.

9.3.1.2.

Wi-Fi Protected Access

9.3.1.2.1.

WPA Improvements

9.3.1.2.2.

9.3.1.2.3.

Message Integrity Check

9.3.1.3.

9.3.1.3.1.

9.3.1.3.2.

Robust Security Network

9.3.1.3.3.

Pre-shared Key Mode

9.3.1.3.4.

Enterprise Mode

9.3.1.4.

9.3.1.4.1.

Simultaneous Authentication of Equals

9.3.1.4.2.

9.3.1.4.3.

9.3.1.4.4.

Enterprise Security Enhancements

9.3.2.

Cellular Security

9.3.2.1.

9.3.2.1.1.

A5/1 and A5/2 Algorithms

9.3.2.1.2.

Authentication and Key Agreement

9.3.2.1.3.

Security Limitations

9.3.2.2.

9.3.2.2.1.

KASUMI Algorithm

9.3.2.2.2.

Mutual Authentication

9.3.2.2.3.

Integrity Protection

9.3.2.3.

4G LTE Security

9.3.2.3.1.

AES-based Algorithms

9.3.2.3.2.

Enhanced Key Hierarchy

9.3.2.3.3.

Backhaul Protection

9.3.2.4.

9.3.2.4.1.

Enhanced Authentication

9.3.2.4.2.

Network Slicing Security

9.3.2.4.3.

Edge Computing Security

9.3.3.

Bluetooth Security

9.3.3.1.

Bluetooth Security Architecture

9.3.3.2.

Pairing Mechanisms

9.3.3.3.

Encryption and Authentication

9.3.3.4.

Security Vulnerabilities

9.4.

9.4.1.

HTTPS Implementation

9.4.1.1.

Certificate Management

9.4.1.2.

Mixed Content Issues

9.4.1.3.

HTTP Strict Transport Security

9.4.2.

Web Application Security

9.4.2.1.

Cross-Site Scripting Prevention

9.4.2.2.

SQL Injection Prevention

9.4.2.3.

Cross-Site Request Forgery Protection

9.4.3.

Browser Security

9.4.3.1.

Same-Origin Policy

9.4.3.2.

Content Security Policy

9.4.3.3.

Certificate Pinning

9.5.

Messaging Security

9.5.1.

Instant Messaging Security

9.5.1.1.

Off-the-Record Messaging

9.5.1.2.

Signal Protocol

9.5.1.3.

End-to-End Encryption

9.5.2.

Group Messaging Security

9.5.2.1.

Key Distribution Challenges

9.5.2.2.

Forward Secrecy in Groups

9.5.2.3.

Post-Compromise Security

Previous

8. Cryptanalysis and Security Analysis

Go to top

Next

10. Advanced Cryptographic Concepts