IMPLEMENTING EMAIL SECURITY AND TOKENS: CURRENT STANDARDS, TOOLS, AND PRACTICES

By V. HAMAK

DIGEST DATA AUTHENTICATED DATA AUTHENTICATED-ENVELOPED DATA NON-PROTECTING CONTENT TYPES DATA COMPRESSED DATA RECEIPT SYNTAX CONTENT COLLECTION CONTENT WITH ATTRIBUTES ATTRIBUTES CONTENT TYPE MESSAGE DIGEST SIGNING TIME COUNTER SIGNATURES S/MIME CAPABILITIES ENCRYPTION KEY PREFERENCE SIGNED RECEIPTS CONTENT HINTS CONTENT REFERENCE SIGNING CERTI?CATES SECURITY LABELS EQUIVALENT LABELS SECURE MAIL LISTS ALGORITHMS GENERATING AN S/MIME MESSAGE CHAPTER PROTECTING EMAIL PASSWORDS, HEADERS, AND COMMANDS PASSWORD SCRAMBLE CONNECTION SECURITY TRANSPORT LAYER SECURITY HANDSHAKE PROTOCOL RECORD PROTOCOL IPSEC SECURITY ASSOCIATIONS AUTHENTICATION HEADER ENCAPSULATING SECURITY PAYLOAD INTERNET KEY EXCHANGE (IKE) PART IV TOKENS CHAPTER TOKENS AND HARDWARE SECURITY MODULES EVALUATION CRITERIA TOKENS PC CARDS SMART CARDS LOOKING UNDER THE HOOD OPERATING SYSTEMS AND SMART CARDS CHOOSING SMART CARDS USB TOKENS SOFTWARE TOKENS IBUTTON TOKENS EMBEDDED TOKENS HARDWARE SECURITY MODULES NETWORK-ATTACHED MULTI-USER HARDWARE SECURITY MODULES APPLICATION PROGRAM INTERFACES PART V CASE STUDIES CHAPTER SIGNATURES AND AUTHENTICATION FOR EVERYONE SAFE ARCHITECTURE CRYPTOGRAPHIC ALGORITHMS PKI ARCHITECTURE CERTI?CATE POLICIES CERTI?CATE, CRL, AND OCSP PRO?LES TOKENS AND CRYPTOGRAPHIC MODULES APPLICATIONS SUCCESSES AND SHORTCOMINGS LESSONS LEARNED DEPARTMENT OF DEFENSE PUBLIC KEY INFRASTRUCTURE, MEDIUM GRADE SERVICE, AND COMMON ACCESS CARD ARCHITECTURES DEERS/RAPIDS ARCHITECTURE CERTI?CATE AND CRL PRO?LES CERTI?CATE STATUS RESPONDERS REPOSITORIES CAC AND CRYPTOGRAPHIC MODULES SUCCESS AND SHORTCOMINGS NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY PERSONAL IDENTITY VERI?CATION PIV ARCHITECTURE ARCHITECTURE CARDS AND CRYPTOGRAPHIC MODULES PART VI EXPECTATIONS FOR THE FUTURE CHAPTER FUTURE DEVELOPMENTS EMAIL EVOLUTION OF MESSAGING STOPPING SPAM CRYPTOGRAPHY COMPETING HASH ALGORITHMS ADOPTING ELLIPTIC CURVE CRYPTOGRAPHY PUBLIC KEY INFRASTRUCTURE TRENDING ARCHITECTURES CHECKING CERTI?CATE STATUS ONLINE CERTI?CATE STATUS PROTOCOL SERVER-BASED CERTI?CATE VALIDATION PROTOCOL AUTHORIZING WITH ATTRIBUTE CERTI?CATES DELEGATING WITH PROXY CERTI?CATES MANAGING TRUST ANCHORS SECURITY PHYSICAL ACCESS CONTROL CONCLUSION P A R T I EMAIL AND SECURITY BACKGROUND