Review Questions
1. What are two different uses of public-key cryptography related to key distribution?
- The distribution of public keys
- The use of public-key encryption to distribute secret keys.
2. List four general categories of schemes for the distribution of public keys.
- Public announcement: Essentially you publish your public key yourself and people find it in the "wild" as it were and trust that it is really yours.
- Publicly available directory: Maintained by some trusted entity
- Public-key Authority: Requests are made to the Athority and it sends a private key encrypted response containing the requested key. Thus we know that the key came from the authority. But this becomes the bottleneck of the system.
- Public-key Certificates:
3. What are the essential ingredientes of a public-key directory?
- The directory authority maintains a {name, public-key}
- Participants register a public key with the directory authority in person or through some secure authenticated communication.
- Participants may replace their public key at any time.
- Periodically the authority publishes the entire directory or updates to it. (With the net this is no longer an issue.)
- Participants may access the directory electroniclly via a secure authenticated communication.
4. What is a public-key certificate?
5. What are the requirements for the use of a public-key certificate scheme?
6. Briefly explain Diffie-Hellman key exchange.
7. What is an elliptic curve?
8. What is the zero point of an elliptic curve?
9. What is the sum of three points on an elliptic curve that lie on a straight line?