Premium Partner

Digital Signature

Hassenstein Thema 4

Hassenstein Thema 4


Kartei Details

Karten 33
Sprache English
Kategorie Informatik
Stufe Universität
Erstellt / Aktualisiert 03.01.2019 / 31.01.2019
Lizenzierung Keine Angabe
Weblink
https://card2brain.ch/box/20190103_digital_signature
Einbinden
<iframe src="https://card2brain.ch/box/20190103_digital_signature/embed" width="780" height="150" scrolling="no" frameborder="0"></iframe>

Recap: What do certificates provide?

- integrity

- authentication

- non-repudiation

Recap: Why are digital signatures important?

And what can be signed? (at least 3 answers)

- PDF, MS-Word

- XML docs

- emails

- image-/binary-files

Recap: Tell the 3 most common algorithms to create a digital signature?

- RSA

- DSA

- ECDSA

Recap: What part of a message is singed?

And which hashing algorithm family should be used?

 

- the message digest (rather than the message itself)

- SHA-2, SHA-3

Recap: What must a Digital Certificate include? (4 answers)

- bind public key to identity

- Path Validation up to root CA / Log Verification (CT-log)

- CP/CPS Policy (for what the cert should be used - ex. encryption, authentication or signing)

- Web Trust (http://www.webtrust.org/item64428.aspx) -->can provide assurance services to evaluate and test whether the services provided by a particular Certification Authority meet these principles and criteria.

CMS (Cryptographic Message Syntax) SignedData:

in which notation the CMS is presented?

what contains a cms signed message? (3 parts)

- ASN.1

 

- digital signature (encrypted hash)

- infromation about the signer (subject name

- serial number

PDF Signature Standard:

What is serial signing of PDFs?

What components are interanlly used for signing?

- serial signing is where each signature comprises the prveious signatures

- PKCS#7 and CMS

Signature in PDF

When a PDF is signed as below, is this signature embedded or is this a separate file?

What parts of the PDF can be signed

- it is embedded

- signature value may also include additional information such as a signature graphic a time stamp and other data