MIS Week One 总结

ＤＡＹ　３

• Key Management----首先面临的问题是非对称加密虽然安全但是浪费时间。

  - session key——用一个非对称加密方法传送对称加密的**
  
  - 可信任的第三方（KDC）——If we trust a "third party" to generate keys we communicate with them to get the session key.Now we only need to establish a secure asymmetric connection to trusted party.
  

  

3. 认证

• 双重加密——First with the private key of the sender.Second with the public key of the receiver.
• digital signing——Authentication without encryption

4. 中间人能够在非对称加密交换**时做文章

5. SSL/TLS:

• Protocol must:
  a. Exchange and check certificate of website
  b. Asymmetric RSA/Diffie-Hellman send session key
  c. Symmetric for encoding session