Network security

語彙

English	意味
MAC/mæk/	MAC
TLS/ˌtiː el ˈes/	A protocol that protects data in transit using encryption, integrity checks and peer authentication.
symmetric/sɪˈmetrɪk/	Having corresponding parts or relationships that remain equivalent under a specified transformation or interchange.
asymmetric/ˌeɪsɪˈmetrɪk/	In cryptography, describing methods that use a related public key and private key rather than one shared secret key.

English

The three properties

Confidentiality needs encryption; integrity needs a MAC; authentication needs a certificate chain to a root the client already trusts. Drop any one and the protocol fails differently: no encryption is a wiretap, no MAC is alteration, no certificate is an impostor.
TLS layers them: symmetric for the data (fast), asymmetric for the key agreement (one expensive operation), certificates for identity.

{exercise:uni-cs0906-props}

実践

Integrity without confidentiality still —

難易度 1/5 · 100 コイン + 今日初回達成時の小ボーナス

English

ClientHello (suites + fresh random), ServerHello (chosen suite + random) with certificate, key exchange (premaster under the public key), both derive session keys from the three values, Finished messages verify — then data flows symmetric-encrypted.
One RSA-style operation, then stream-speed cryptography: the asymmetry is used only to agree on the symmetric key.

{exercise:uni-cs0906-handshake}

実践

TLS uses asymmetric cryptography —

難易度 1/5 · 100 コイン + 今日初回達成時の小ボーナス

English

Passive sniffing: defeated by encryption. Modification: defeated by the MAC (Finished catches handshake tampering). Impersonation: defeated by certificates. Handshake replay: defeated by the fresh randoms.
Encrypting without authenticating gives you a secure channel to the wrong machine; HTTPS makes the channel private and the server identified — the content can still lie.

{exercise:uni-cs0906-attacks}

実践

Handshake replay is defeated by —

難易度 1/5 · 100 コイン + 今日初回達成時の小ボーナス