TAILIEUCHUNG - Lecture notes on Computer and network security: Lecture 10 - Avinash Kak

Lecture 10, key distribution for symmetric key cryptography and generating random numbers. The goals of this chapter are: Why might we need key distribution centers? Master key vs. session key, hierarchical and decentralized key distributions, generating pseudorandom numbers. | Lecture 10: Key Distribution for Symmetric Key Cryptography and Generating Random Numbers Lecture Notes on “Computer and Network Security” by Avi Kak (kak@) February 11, 2016 4:07pm c 2016 Avinash Kak, Purdue University Goals: • Why might we need key distribution centers? • Master key vs. Session key • Hierarchical and decentralized key distributions • Generating pseudorandom numbers • Generating cryptograhically secure pseudorandom numbers • Hardware and software entropy sources for truly random numbers • A word of caution regarding software entropy sources CONTENTS Section Title Page The Need for Key Distribution Centers 3 The Needham-Schroeder Key Distribution Protocol 5 Some Variations on the KDC Approach to Key Distribution 10 Kerberos 12 Random Number Generation 23 When are Random Numbers Truly Random? 25 Pseudorandom Number Generators (PRNG): Linear Congruential Generators 27 Cryptographically Secure PRNGs: The ANSI Algorithm 32 Cryptographically Secure PRNGs: The Blum Blum Shub Generator (BBS) 37 Entropy Sources for Generating True Random Numbers 40 Software Entropy Sources 47 /dev/random and /dev/urandom as Sources of Random Bytes 49 EGD — Entropy Gathering Daemon 54 PRNGD (Pseudo Random Number Generator Daemon) 58 A Word of Caution Regarding Software Sources of Entropy 60 Homework Problems 63 2 Computer and Network Security by Avi Kak Lecture 10 : THE NEED FOR KEY DISTRIBUTION CENTERS • Let’s say we have a large number of people, processes, or systems that want to communicate with one another in a secure fashion. Let’s further add that this group of people/processes/systems is not static, meaning that the individual entities may join or leave the group at any time. • A simple-minded solution to this problem would consist of each party physically exchanging an encryption key with .

• An ninh - Bảo mật
• Network security
• Lecture notes on Computer and network security
• Computer security
• Key distribution
• Symmetric key cryptography
• Generating random numbers
• Web security
• security rules
• encryption techniques
• security techniques
• Security chat rooms
• especially
• Network Security Tools
• CCNA Security
• Lecture CCNA Security
• Modern Network Security Threats
• Evolution of Network Security
• Drivers for Network Security
• Network Perimeter
• Network Perimeter Security
• Network Security Principles
• Cryptography
• IDS Tools
• CGI attacks
• network intruders
• Managing Security
• Wireless
• Wireless Network Security
• attack techniques
• defensive techniques
• operating system security
• application security
• security policy
• Network Security Fundamentals
• Guide to Network Security Fundamentals
• Information security
• Define information security
• Information security careers
• Operational security
• Harden physical security
• Secure the physical environment
• Mobile device security
• Lecture Network security
• Computer network
• Computer hacking
• Internet security
• Network security model
• Securing the Network Infrastructure
• Network cable plant
• Secure removable media
• Network security hacks
• Ebook Network security hacks
• Network security technologies
• Unix host security
• Windows host security
• Wireless Security
• Advanced security
• Computer forensics
• Harden security
• Network Management Security
• Management Security
• security mechanisms
• security services
• security architecture
• encryption system
• Security principles
• Effective authentication methods
• Control access to computer systems
• Security Baselines
• Disable nonessential systems
• Harden operating systems
• Protect e mail systems
• World Wide Web vulnerabilities
• Security policy cycle
• Risk identification
• Security management
• Identity management
• Plan for change management
• CompTIA® Security+
• CompTIA Security+ certification
• Linux file manipulation tools
• Internal physical security controls
• Network hardware security modules