Notes for December 6, 1999

1. Greetings and Felicitations!
2. Puzzle of the Day
3. Practise: detecting writing
   1. Integrity check files à la binaudit, tripwire; go through signature block
   2. LOCUS approach: encipher program, decipher as you execute.
   3. Co-processors: checksum each sequence of instructions, compute checksum as you go; on difference, complain
4. Network security
   1. Main point: just like a system
5. Review of ISO model
6. Authentication protocols
   1. Kerberos
7. PKI
   1. Certificate-based key management
   2. X.509 model, other models
8. PEM, PGP
   1. Goals: confidentiality, authentication, integrity, non-repudiation (maybe)
   2. Design goals: drop in (not change), works with any RFC 821-conformant MTA and any UA, and exchange messages without prior interaction
   3. Use of Data Exchange Key, Interchange Key
   4. Review of how to do confidentiality, authentication, integrity with public key IKs
   5. Details: canonicalization, security services, printable encoding (PEM)
   6. PGP v. PEM