Chapter 4 key terms

Authentication header. An IPsec protocol that authenticates that packets received were sent from the source.

A process that specifies how block ciphers should handle plaintext.

canonical encoding rules. An X.509 encoding format.

Certificate authority.The entity that is responsible for digital certificates.

Linking several certificates together to establish trust between all the certificates involved.

Certificate revocation list. A list of certificate serial numbers that have been revoked.

certificate signing request. A user request for a digital certificate.

cipher block chaining. A process in which each block of plaintext is XORed with the previous block of ciphertext before being encrypted.

Certificate used by software developers to digitally sign a program to prove that the software comes from the entity that signed it and that no unauthorized third party has altered it.

A process in which both the message sender and receiver access a counter, which computes a new value each time a ciphertext block is exchanged.

Cryptography modules that are invoked by crypto service providers.

A service used by an application to implement cryptography.

A technology used to associate a user’s identity to a public key and that has been digitally signed by a trusted third party.

Distinguished encoding rules. An X.509 encoding format.

Certificate that verifies the identity of the entity that has control over the domain name.

electronic code book. A process in which plaintext is divided into blocks and each block is then encrypted separately.

A certificate that allows a user to digitally sign and encrypt mail messages.

Certificate that requires more extensive verification of the legitimacy of the business than does a domain validation digital certificate. Encapsulating security payload.

Certificate that requires more extensive verification of the legitimacy of the business than does a domain validation digital certificate. extended validation.

Galois/Country. A process that both encrypts and computes a message authentication code (MAC).

Hypertext transport protocol secure. HTTP sent over SSL (Secure Sockets Layer) or TLS (Transport Layer Security).

initialization vector is a A nonce that is selected in a non-predictable way.

intermediate certificate authority. An entity that processes the CSR and verifies the authenticity of the user on behalf of a certificate authority (CA).

A protocol suite for securing Internet Protocol (IP) communications. Internet protcol security.

A process in which keys are managed by a third party, such as a trusted CA.

The resiliency of a key to resist attacks.

Certificate used to verify the identity of a device in a network transaction.

A value that must be unique within some specified scope.

object identifier. A designator made up of a series of numbers separated with a dot which names an object or entity.

A certificate authority that is not directly connected to a network.

A certificate authority that is directly connected to a network.

online certificate status protocol A process that performs a real-time lookup of a certificate’s status.

personal information exchange, An X.509 file format that is the preferred file format for creating certificates to authenticate applications or websites.

Hard-coding a digital certificate within a program that is using the certificate.

An X.509 file format that is one of a numbered set of 15 standards defined by RSA Corporation.

privacy enhancement mail, An X.509 file format that uses DER encoding and can have multiple certificates.

The underlying infrastructure for the management of public keys used in digital certificates.

A certificate that is created and verified by a CA.

A value that can be used to ensure that plaintext, when hashed, will not consistently result in the same digest.

An attempt to hide the existence of an algorithm for enhanced security.

Secure real time transport protocol. A protocol for providing protection for Voice over IP (VoIP) communications.

Secure shell, An encrypted alternative to the Telnet protocol that is used to access remote computers.

Secure Socket Layer, An early and widespread cryptographic transport algorithm; now considered obsolete.

Secure/ Multipurpose Internet Mail Extensions, a protocol fo securing email messages.

A signed digital certificate that does not depend upon any higher level authority for authentication.

Symmetric keys used to encrypt and decrypt information exchanged during the session and to verify its integrity.

A process for verifying the status of a certificate by sending queries at regular intervals to receive a signed time-stamped response.

Subject alternative name, Also known as a Unified Communications Certificate (UCC), certificate primarily used for Microsoft Exchange servers or unified communications.

Transport Layer Security, A widespread cryptographic transport algorithm. Current versions v1.1 and v1.2 are considered secure.

An IPsec mode that encrypts only the data portion (pay-load) of each packet yet leaves the header unencrypted.

The type of trust relationship that can exist between individuals or entities.

An IPsec mode that encrypts both the header and the data portion.

The end-point of the certificate chain.

Certificate used to validate a main domain along with all subdomains.