Tutorial s crypto api session keys

Tutorial: Windows Cryptographic API and Session Key Management Dr. Edwin Hernandez IEEE SOUTHEAST CONFERENCE 2005

Outline ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Problem: Key Management and Storage in Applications ,[object Object],[object Object],[object Object],[object Object],[object Object]

Microsoft’s Crypto API (MS CAPI) ,[object Object]

CSPs in MSDN (Not all are supported in all platforms)

Cryptographic Service Providers Windows CE CSPs

Cryptographic Service Providers ,[object Object],[object Object],[object Object]

Important concept: Key Containers ,[object Object],[object Object],[object Object]

Important Concepts ,[object Object],[object Object],[object Object],[object Object]

Important Concepts: Containers and Key Storage ,[object Object],[object Object],[object Object],[object Object]

Digital Signature Wizard (Platform SDK or Windows Mobile SDK)

Methods of generating keys into a container ,[object Object],[object Object]

Sample code with Key Containers ,[object Object],[object Object],[object Object]

Acquire Valid Key Container ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Retrieving Container Keys (Signature) ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Retrieving Container Keys (Exchange) ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Retrieve Key Public Key ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Retrieving Key Container (Private Key Blob) ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Exchanging a Session Key ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Exchanging Encrypted Data with Session Key Receive(Message, eSessionKey) CryptImport(hMyOwnPublicKey, &dSessionKey); CryptDecrypt(hKey, &Message); hKey = CryptGenKey(CALG_3DES) CryptImport(hKeyExchange, &ReceiversPublicKey); CryptExport(hKey, &SessionKey) CryptEncrypt(hKeyExchange, ..&SessionKey,) CryptEncrypt(hKey, &Message); Send(Message, SessionKey) Receiver Sender

Backward Compatibility Matching Session Keys with Container Key ,[object Object],[object Object],[object Object]

Exponent-of-One ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Hardcoded session key = Key container key ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Conclusions ,[object Object],[object Object],[object Object],[object Object],[object Object]

Tutorial s crypto api session keys

Recommandé

Recommandé

Contenu connexe

Tendances

Tendances (20)

Similaire à Tutorial s crypto api session keys

Similaire à Tutorial s crypto api session keys (20)

Plus de Dr. Edwin Hernandez

Plus de Dr. Edwin Hernandez (20)

Tutorial s crypto api session keys