INTRUSION PREVENTION AND ACTIVE RESPONSE
CHAPTER 1 INTRODUCTION 11 PRIMER ON NETWORKING 111 OSI REFERENCE MODEL 112 IP, UDP, AND TCP 113 DIRECTORY SERVICE 114 REPLICATED SERVICES 115 PACKET SWITCHING 116 NETWORK COMPONENTS 117 DESTINATIONS: ULTIMATE AND NEXT-HOP 118 ADDRESS STRUCTURE 12 ACTIVE VS PASSIVE ATTACKS 13 LAYERS AND CRYPTOGRAPHY 14 AUTHORIZATION 15 TEMPEST 16 KEY ESCROW FOR LAW ENFORCEMENT 17 KEY ESCROW FOR CARELESS USERS 18 VIRUSES, WORMS, TROJAN HORSES 181 WHERE DO THEY COME FROM? 182 SPREADING PESTS FROM MACHINE TO MACHINE 183 VIRUS CHECKERS 184 WHAT CAN WE DO TODAY? 185 WISH LIST FOR THE FUTURE 19 THE MULTI-LEVEL MODEL OF SECURITY 191 MANDATORY (NONDISCRETIONARY) ACCESS CONTROLS 192 LEVELS OF SECURITY 193 MANDATORY ACCESS CONTROL RULES 194 COVERT CHANNELS 195 THE ORANGE BOOK 196 SUCCESSORS TO THE ORANGE BOOK 110 LEGAL ISSUES 1101 PATENTS 1102 EXPORT CONTROLS PART 1 CRYPTOGRAPHY CHAPTER 2 INTRODUCTION TO CRYPTOGRAPHY 21 WHAT IS CRYPTOGRAPHY? 211 COMPUTATIONAL DIFFICULTY 212 TO PUBLISH OR NOT TO PUBLISH 213 SECRET CODES 22 BREAKING AN ENCRYPTION SCHEME 221 CIPHERTEXT ONLY 222 KNOWN PLAINTEXT 223 CHOSEN PLAINTEXT 23 TYPES OF CRYPTOGRAPHIC FUNCTIONS 24 SECRET KEY CRYPTOGRAPHY 241 SECURITY USES OF SECRET KEY CRYPTOGRAPHY 242 TRANSMITTING OVER AN INSECURE CHANNEL 243 SECURE STORAGE ON INSECURE MEDIA 244 AUTHENTICATION 245 INTEGRITY CHECK 25 PUBLIC KEY CRYPTOGRAPHY 251 SECURITY USES OF PUBLIC KEY CRYPTOGRAPHY 252 TRANSMITTING OVER AN INSECURE CHANNEL 253 SECURE STORAGE ON INSECURE MEDIA 254 AUTHENTICATION 255 DIGITAL SIGNATURES 26 HASH ALGORITHMS 261 PASSWORD HASHING 262 MESSAGE INTEGRITY 263 MESSAGE FINGERPRINT 264 DOWNLINE LOAD SECURITY 265 DIGITAL SIGNATURE EFFICIENCY 27 HOMEWORK CHAPTER 3 SECRET KEY CRYPTOGRAPHY 31 INTRODUCTION 32 GENERIC BLOCK ENCRYPTION 33 DATA ENCRYPTION STANDARD (DES) 331 DES OVERVIEW 332 THE PERMUTATIONS OF THE DATA 333 GENERATING THE PER-ROUND KEYS 334 A DES ROUND 335 THE MANGLER FUNCTION 336 WEAK AND SEMI-WEAK KEYS 337 WHAT’S SO SPECIAL ABOUT DES? 34 INTERNATIONAL DATA ENCRYPTION ALGORITHM (IDEA) 341 PRIMITIVE OPERATIONS 342 KEY EXPANSION 343 ONE ROUND 3431 ODD ROUND 3432 EVEN ROUND 344 INVERSE KEYS FOR DECRYPTION 345 DOES IDEA WORK? 35 ADVANCED ENCRYPTION STANDARD (AES) 351 BASIC STRUCTURE 352 PRIMITIVE OPERATIONS 3521 WHAT ABOUT THE INVERSE CIPHER? 353 KEY EXPANSION 354 ROUNDS 355 INVERSE ROUNDS 356 OPTIMIZATION 36 RC4 37 HOMEWORK CHAPTER 4 MODES OF OPERATION 41 INTRODUCTION 42 ENCRYPTING A LARGE MESSAGE 421 ELECTRONIC CODE BOOK (ECB) 422 CIPHER BLOCK CHAINING (CBC) 4221 CBC THREAT 1—MODIFYING CIPHERTEXT BLOCKS 4222 CBC THREAT 2—REARRANGING CIPHERTEXT BLOCKS 423 OUTPUT FEEDBACK MODE (OFB) 424 CIPHER FEEDBACK MODE (CFB) 425 COUNTER MODE (CTR) 43 GENERATING MACS 431 ENSURING PRIVACY AND INTEGRITY TOGETHER 432 CBC WITH A WEAK CRYPTOGRAPHIC CHECKSUM 433 CBC ENCRYPTION AND CBC RESIDUE WITH RELATED KEYS 434 CBC WITH A CRYPTOGRAPHIC HASH 435 OFFSET CODEBOOK MODE (OCB) 44 MULTIPLE ENCRYPTION DES 441 HOW MANY ENCRYPTIONS? 4411 ENCRYPTING TWICE WITH THE SAME KEY 4412 ENCRYPTING TWICE WITH TWO KEYS 4413 TRIPLE ENCRYPTION WITH ONLY TWO KEYS 442 CBC OUTSIDE VS INSIDE 45 HOMEWORK CHAPTER 5 HASHES AND MESSAGE DIGESTS 51 INTRODUCTION 52 NIFTY THINGS TO DO WITH A HASH 521 AUTHENTICATION 522 COMPUTING A MAC WITH A HASH 523 ENCRYPTION WITH A MESSAGE DIGEST 5231 GENERATING A ONE-TIME PAD 5232 MIXING IN THE PLAINTEXT 524 USING SECRET KEY FOR A HASH 5241 UNIX PASSWORD HASH 5242 HASHING LARGE MESSAGES 53 MD2 531 MD2 PADDING 532 MD2 CHECKSUM COMPUTATION 533 MD2 FINAL PASS 54 MD4 541 MD4 MESSAGE PADDING 542 OVERVIEW OF MD4 MESSAGE DIGEST COMPUTATION 543 MD4 MESSAGE DIGEST PASS 1 544 MD4 MESSAGE DIGEST PASS 2 545 MD4 MESSAGE DIGEST PASS 3 55 MD5 551 MD5 MESSAGE PADDING 552 OVERVIEW OF MD5 MESSAGE DIGEST COMPUTATION 553 MD5 MESSAGE DIGEST PASS 1 554 MD5 MESSAGE DIGEST PASS 2 555 MD5 MESSAGE DIGEST PASS 3 556 MD5 MESSAGE DIGEST PASS 4 56 SHA-1 561 SHA-1 MESSAGE PADDING 562 OVERVIEW OF SHA-1 MESSAGE DIGEST COMPUTATION 563 SHA-1 OPERATION ON A 512-BIT BLOCK 57 HMAC 58 HOMEWORK CHAPTER 6 PUBLIC KEY ALGORITHMS 61 INTRODUCTION 62 MODULAR ARITHMETIC 621 MODULAR ADDITION 622 MODULAR MULTIPLICATION 623 MODULAR EXPONENTIATION 63 RSA 631 RSA ALGORITHM 632 WHY DOE S RSA WORK? 633 WHY IS RSA SECURE? 634 HOW EFFICIENT ARE THE RSA OPERATIONS? 6341 EXPONENTIATING WITH BIG NUMBERS 6342 GENERATING RSA KEYS 63421 FINDING BIG PRIMES P AND Q 63422 FINDING D AND E 6343 HAVING A SMALL CONSTANT E 6344 OPTIMIZING RSA PRIVATE KEY OPERATIONS 635 ARCANE RSA THREATS 6351 SMOOTH NUMBERS 6352 THE CUBE ROOT PROBLEM 636 PUBLIC-KEY CRYPTOGRAPHY STANDARD (PKCS) 6361 ENCRYPTION 6362 ENCRYPTION—TAKE 2 6363 SIGNING 64 DIFFIE-HELLMAN 641 THE BUCKET BRIGADE/MAN-IN-THE-MIDDLE ATTACK 642 DEFENSES AGAINST MAN-IN-THE-MIDDLE ATTACK 6421 PUBLISHED DIFFIE-HELLMAN NUMBERS 6422 AUTHENTICATED DIFFIE-HELLMAN 643 ENCRYPTION WITH DIFFIE-HELLMAN 644 ELGAMAL SIGNATURES 645 DIFFIE-HELLMAN DETAILS—SAFE PRIMES 65 DIGITAL SIGNATURE STANDARD (DSS) 651 THE DSS ALGORITHM 652 WHY DOES THE VERIFICATION PROCEDURE WORK? 653 WHY IS THIS SECURE? 654 THE DSS CONTROVERSY 655 PER-MESSAGE SECRET NUMBER 66 HOW SECURE ARE RSA AND DIFFIE-HELLMAN? 67 ELLIPTIC CURVE CRYPTOGRAPHY (ECC) 68 ZERO KNOWLEDGE PROOF SYSTEMS 681 ZERO KNOWLEDGE SIGNATURES 69 HOMEWORK PROBLEMS PART 2 AUTHENTICATION CHAPTER 7 OVERVIEW OF AUTHENTICATION SYSTEM 71 PASSWORD-BASED AUTHENTICATION 711 OFF- VS ON-LINE PASSWORD GUESSING 712 STORING USER PASSWORDS 72 ADDRESS-BASED AUTHENTICATION 721 NETWORK ADDRESS IMPERSONATION 73 CRYPTOGRAPHIC AUTHENTICATION PROTOCOLS 74 WHO IS BEING AUTHENTICATED? 75 PASSWORDS AS CRYPTOGRAPHIC KEYS 76 EAVESDROPPING AND SERVER DATABASE READING 77 TRUSTED INTERMEDIARIES 771 KDCS 772 CERTIFICATION AUTHORITIES (CAS) 773 CERTIFICATE REVOCATION 774 MULTIPLE TRUSTED INTERMEDIARIES 7741 MULTIPLE KDC DOMAINS 7742 MULTIPLE CA DOMAINS 78 SESSION KEY ESTABLISHMENT 79 DELEGATION 710 HOMEWORK CHAPTER 8 AUTHENTICATION OF PEOPLE 81 PASSWORDS 82 ON-LINE PASSWORD GUESSING 83 OFF-LINE PASSWORD GUESSING 84 HOW BIG SHOULD A SECRET BE? 85 EAVESDROPPING 86 PASSWORDS AND CARELESS USERS 861 USING A PASSWORD IN MULTIPLE PLACES 862 REQUIRING FREQUENT PASSWORD CHANGES 863 A LOGIN TROJAN HORSE TO CAPTURE PASSWORDS 864 NON-LOGIN USE OF PASSWORDS 87 INITIAL PASSWORD DISTRIBUTION 88 AUTHENTICATION TOKENS 89 PHYSICAL ACCESS 810 BIOMETRICS 811 HOMEWORK CHAPTER 9 SECURITY HANDSHAKE PITFALLS 91 LOGIN ONLY 911 SHARED SECRET 912 ONE-WAY PUBLIC KEY 92 MUTUAL AUTHENTICATION 921 REFLECTION ATTACK 922 PASSWORD GUESSING 923 PUBLIC KEYS 924 TIMESTAMPS 93 INTEGRITY/ENCRYPTION FOR DATA 931 SHARED SECRET 932 TWO-WAY PUBLIC KEY BASED AUTHENTICATION 933 ONE-WAY PUBLIC KEY BASED AUTHENTICATION 934 PRIVACY AND INTEGRITY 94 MEDIATED AUTHENTICATION (WITH KDC) 941 NEEDHAM-SCHROEDER 942 EXPANDED NEEDHAM-SCHROEDER 943 OTWAY-REES 95 NONCE TYPES 96 PICKING RANDOM NUMBERS 97 PERFORMANCE CONSIDERATIONS 98 AUTHENTICATION PROTOCOL CHECKLIST 99 HOMEWORK CHAPTER 10 STRONG PASSWORD PROTOCOLS 101 INTRODUCTION 102 LAMPORT’S HASH 103 STRONG PASSWORD PROTOCOLS 1031 THE BASIC FORM 1032 SUBTLE DETAILS 1033 AUGMENTED STRONG PASSWORD PROTOCOLS 1034 SRP (SECURE REMOTE PASSWORD) 104 STRONG PASSWORD CREDENTIALS DOWNLOAD PROTOCOLS 105 HOMEWORK PART 3 STANDARDS CHAPTER 11 KERBEROS V4 111 INTRODUCTION 112 TICKETS AND TICKET-GRANTING TICKETS 113 CONFIGURATION 114 LOGGING INTO THE NETWORK 1141 OBTAINING A SESSION KEY AND TGT 1142 ALICE ASKS TO TALK TO A REMOTE NODE 115 REPLICATED KDCS 116 REALMS 117 INTERREALM AUTHENTICATION 118 KEY VERSION NUMBERS 119 ENCRYPTION FOR PRIVACY AND INTEGRITY 1110 ENCRYPTION FOR INTEGRITY ONLY 1111 NETWORK LAYER ADDRESSES IN TICKETS 1112 MESSAGE FORMATS 11121 TICKETS 11122 AUTHENTICATORS 11123 CREDENTIALS 11124 AS_REQ 11125 TGS_REQ 11126 AS_REP AND TGS_REP 11127 ERROR REPLY FROM KDC 11128 AP_REQ 11129 AP_REP 111210 ENCRYPTED DATA (KRB_PRV) 111211 INTEGRITY-CHECKED DATA (SAFE) 111212 AP_ERR 1113 HOMEWORK CHAPTER 12 KERBEROS V5 121 ASN1 122 NAMES 123 DELEGATION OF RIGHTS 124 TICKET LIFETIMES 1241 RENEWABLE TICKETS 1242 POSTDATED TICKETS 125 KEY VERSIONS 126 MAKING MASTER KEYS IN DIFFERENT REALMS DIFFERENT 127 OPTIMIZATIONS 128 CRYPTOGRAPHIC ALGORITHMS 1281 INTEGRITY-ONLY ALGORITHMS 12811 RSA-MD5-DES 12812 DES-MAC 12813 DES-MAC-K 12814 RSA-MD4-DES 12815 RSA-MD4-DES-K 1282 ENCRYPTION FOR PRIVACY AND INTEGRITY 129 HIERARCHY OF REALMS 1210 EVADING PASSWORD-GUESSING ATTACKS 1211 KEY INSIDE AUTHENTICATOR 1212 DOUBLE TGT AUTHENTICATION 1213 PKINIT—PUBLIC KEYS FOR USERS 1212 KDC DATABASE 1215 KERBEROS V5 MESSAGES 12151 AUTHENTICATOR 12152 TICKET 12153 AS_REQ 12154 TGS_REQ 12155 AS_REP 12156 TGS_REP 12157 AP_REQ 12158 AP_REP 12159 KRB_SAFE 121510 KRB_PRIV 121511 KRB_CRED 121512 KRB_ERROR 1216 HOMEWORK CHAPTER 13 PKI (PUBLIC KEY INFRASTRUCTURE) 131 INTRODUCTION 132 SOME TERMINOLOGY 133 PKI TRUST MODELS 1331 MONOPOLY MODEL 1332 MONOPOLY PLUS REGISTRATION AUTHORITIES (RAS) 1333 DELEGATED CAS 1334 OLIGARCHY 1335 ANARCHY MODEL 1336 NAME CONSTRAINTS 1337 TOP-DOWN WITH NAME CONSTRAINTS 1338 BOTTOM-UP WITH NAME CONSTRAINTS 1339 RELATIVE NAMES 13310 NAME CONSTRAINTS IN CERTIFICATES 13311 POLICIES IN CERTIFICATES 134 REVOCATION 1341 REVOCATION MECHANISMS 13411 DELTA CRLS 13412 FIRST VALID CERTIFICATE 1342 OLRS SCHEMES 1343 GOOD-LISTS VS BAD-LISTS 135 DIRECTORIES AND PKI 1351 STORE CERTIFICATES WITH SUBJECT OR ISSUER? 1352 FINDING CERTIFICATE CHAINS 136 PKIX AND X509 1361 NAMES 1362 OIDS 1363 SPECIFICATION OF TIME 137 X509 AND PKIX CERTIFICATES 1371 X509 AND PKIX CRLS 138 AUTHORIZATION FUTURES 1381 ACL (ACCESS CONTROL LIST) 1382 CENTRAL ADMINISTRATION/CAPABILITIES 1383 GROUPS 13831 CROSS-ORGANIZATIONAL AND NESTED GROUPS 1384 ROLES 1385 ANONYMOUS GROUPS 139 HOMEWORK CHAPTER 14 REAL-TIME COMMUNICATION SECURITY 141 WHAT LAYER? 142 SESSION KEY ESTABLISHMENT 143 PERFECT FORWARD SECRECY 144 PFS-FOILAGE 145 DENIAL-OF-SERVICE/CLOGGING PROTECTION 1451 COOKIES 1452 PUZZLES 146 ENDPOINT IDENTIFIER HIDING 147 LIVE PARTNER REASSURANCE 148 ARRANGING FOR PARALLEL COMPUTATION 149 SESSION RESUMPTION 1410 PLAUSIBLE DENIABILITY 1411 DATA STREAM PROTECTION 1412 NEGOTIATING CRYPTO PARAMETERS 1413 EASY HOMEWORK 1414 HOMEWORK CHAPTER 15 IPSEC: AH AND ESP 151 OVERVIEW OF IPSEC 1511 SECURITY ASSOCIATIONS 1512 SECURITY ASSOCIATION DATABASE 1513 SECURITY POLICY DATABASE 1514 AH AND ESP 1515 TUNNEL, TRANSPORT MODE 1516 WHY PROTECT THE IP HEADER? 152 IP AND IPV6 1521 NAT (NETWORK ADDRESS TRANSLATION) 1522 FIREWALLS 1523 IPV4 HEADER 1524 IPV6 HEADER 153 AH (AUTHENTICATION HEADER) 1531 MUTABLE, IMMUTABLE 1532 MUTABLE BUT PREDICTABLE 154 ESP (ENCAPSULATING SECURITY PAYLOAD) 155 SO, DO WE NEED AH? 156 COMPARISON OF ENCODINGS 157 EASY HOMEWORK 158 HOMEWORK CHAPTER 16 IPSEC: IKE 161 PHOTURIS 162 SKIP 163 HISTORY OF IKE 164 IKE PHASES 165 PHASE 1 IKE 1651 AGGRESSIVE MODE AND MAIN MODE 1652 KEY TYPES 1653 PROOF OF IDENTITY 1654 COOKIE ISSUES 1655 NEGOTIATING CRYPTOGRAPHIC PARAMETERS 1656 SESSION KEYS 1657 MESSAGE IDS 1658 PHASE 2/QUICK MODE 1659 TRAFFIC SELECTORS 16510 THE IKE PHASE 1 PROTOCOLS 165101 PUBLIC SIGNATURE KEYS, MAIN MODE 165102 PUBLIC SIGNATURE KEYS, AGGRESSIVE MODE 165103 PUBLIC ENCRYPTION KEY, MAIN MODE, ORIGINAL 165104 PUBLIC ENCRYPTION KEY, AGGRESSIVE MODE, ORIGINAL 165105 PUBLIC ENCRYPTION KEY, MAIN MODE, REVISED 165106 PUBLIC ENCRYPTION KEY, AGGRESSIVE MODE, REVISED 165107 SHARED SECRET KEY, MAIN MODE 165108 SHARED SECRET KEY, AGGRESSIVE MODE 166 PHASE-2 IKE: SETTING UP IPSEC SAS 167 ISAKMP/IKE ENCODING 1671 FIXED HEADER 1672 PAYLOAD PORTION OF ISAKMP MESSAGES 1673 SA PAYLOAD 16731 PS AND TS WITHIN THE SA PAYLOAD 16732 PAYLOAD LENGTH IN SA, P, AND T PAYLOADS 16733 TYPE OF NEXT PAYLOAD 16734 SA PAYLOAD FIELDS 1674 P PAYLOAD 1675 T PAYLOAD 1676 KE PAYLOAD 1677 ID PAYLOAD 1678 CERT PAYLOAD 1679 CERTIFICATE REQUEST PAYLOAD 16710 HASH/SIGNATURE/NONCE PAYLOADS 16711 NOTIFY PAYLOAD 16712 VENDOR ID PAYLOAD 168 HOMEWORK PART 4 ELECTRONIC MAIL CHAPTER 17 ELECTRONIC MAIL SECURITY 171 DISTRIBUTION LISTS 172 STORE AND FORWARD 173 SECURITY SERVICES FOR ELECTRONIC MAIL 174 ESTABLISHING KEYS 1741 ESTABLISHING PUBLIC KEYS 1742 ESTABLISHING SECRET KEYS 175 PRIVACY 1751 END-TO-END PRIVACY 1752 PRIVACY WITH DISTRIBUTION LIST EXPLODERS 176 AUTHENTICATION OF THE SOURCE 1761 SOURCE AUTHENTICATION BASED ON PUBLIC KEY TECHNOLOGY 1762 SOURCE AUTHENTICATION BASED ON SECRET KEYS 1763 SOURCE AUTHENTICATION WITH DISTRIBUTION LISTS 177 MESSAGE INTEGRITY 1771 MESSAGE INTEGRITY WITHOUT SOURCE AUTHENTICATION 178 NON-REPUDIATION 1781 NON-REPUDIATION BASED ON PUBLIC KEY TECHNOLOGY 1782 PLAUSIBLE DENIABILITY BASED ON PUBLIC KEY TECHNOLOGY 1783 NON-REPUDIATION WITH SECRET KEYS 179 PROOF OF SUBMISSION 1710 PROOF OF DELIVERY 1711 MESSAGE FLOW CONFIDENTIALITY 1712 ANONYMITY 1713 CONTAINMENT 1714 ANNOYING TEXT FORMAT ISSUES 17141 DISGUISING DATA AS TEXT 1715 NAMES AND ADDRESSES 1716 VERIFYING WHEN A MESSAGE WAS REALLY SENT 17161 PREVENTING BACKDATING 17162 PREVENTING POSTDATING 1717 HOMEWORK CHAPTER 18 PEM & S/MIME 181 INTRODUCTION 182 STRUCTURE OF A PEM MESSAGE 183 ESTABLISHING KEYS 184 SOME PEM HISTORY 185 PEM CERTIFICATE HIERARCHY 186 CERTIFICATE REVOCATION LISTS (CRLS) 187 REFORMATTING DATA TO GET THROUGH MAILERS 188 GENERAL STRUCTURE OF A PEM MESSAGE 189 ENCRYPTION 1810 SOURCE AUTHENTICATION AND INTEGRITY PROTECTION 1811 MULTIPLE RECIPIENTS 1812 BRACKETING PEM MESSAGES 1813 FORWARDING AND ENCLOSURES 18131 FORWARDING A MESSAGE 1814 UNPROTECTED INFORMATION 1815 MESSAGE FORMATS 18151 ENCRYPTED, PUBLIC KEY VARIANT 18152 ENCRYPTED, SECRET KEY VARIANT 18153 MIC-ONLY OR MIC-CLEAR, PUBLIC KEY VARIANT 18154 MIC-ONLY AND MIC-CLEAR, SECRET KEY VARIANT 18155 CRL-RETRIEVAL-REQUEST 18156 CRL 1816 DES-CBC AS MIC DOESN’T WORK 1817 DIFFERENCES IN S/MIME 1818 S/MIME CERTIFICATE HIERARCHY 18181 S/MIME WITH A PUBLIC CERTIFIER 18182 S/MIME WITH AN ORGANIZATIONAL CERTIFIER 18183 S/MIME WITH CERTIFICATES FROM ANY OLD CA 1819 HOMEWORK CHAPTER 19 PGP (PRETTY GOOD PRIVACY) 191 INTRODUCTION 192 OVERVIEW 193 KEY DISTRIBUTION 194 EFFICIENT ENCODING 195 CERTIFICATE AND KEY REVOCATION 196 SIGNATURE TYPES 197 YOUR PRIVATE KEY 198 KEY RINGS 199 ANOMALIES 1991 FILE NAME 1992 PEOPLE NAMES 1910 OBJECT FORMATS 19101 MESSAGE FORMATS 19102 PRIMITIVE OBJECT FORMATS PART 5 LEFTOVERS CHAPTER 20 FIREWALLS 201 PACKET FILTERS 202 APPLICATION LEVEL GATEWAY 203 ENCRYPTED TUNNELS 204 COMPARISONS 205 WHY FIREWALLS DON’T WORK 206 DENIAL-OF-SERVICE ATTACKS 207 SHOULD FIREWALLS GO AWAY? CHAPTER 21 MORE SECURITY SYSTEMS 211 NETWARE V3 212 NETWARE V4 2121 NETWARE’S GUILLOU-QUISQUATER AUTHENTICATION SCHEME 213 KRYPTOKNIGHT 2131 KRYPTOKNIGHT TICKETS 2132 AUTHENTICATORS 2133 NONCES VS TIMESTAMPS 2134 DATA ENCRYPTION 214 DASS/SPX 2141 DASS CERTIFICATION HIERARCHY 2142 LOGIN KEY 2143 DASS AUTHENTICATION HANDSHAKE 2144 DASS AUTHENTICATORS 2145 DASS DELEGATION 2146 SAVING BITS 215 LOTUS NOTES SECURITY 2151 ID FILES 2152 COPING WITH EXPORT CONTROLS 2153 CERTIFICATES FOR HIERARCHICAL NAMES 2154 CERTIFICATES FOR FLAT NAMES 2155 LOTUS NOTES AUTHENTICATION 2156 THE AUTHENTICATION LONG-TERM SECRET 2157 MAIL 2158 CERTIFICATION REVOCATION 216 DCE SECURITY 217 MICROSOFT WINDOWS SECURITY 2171 LAN MANAGER AND NTLM 2172 WINDOWS 2000 KERBEROS 218 NETWORK DENIAL OF SERVICE 2181 ROBUST BROADCAST 2182 ROBUST PACKET DELIVERY 219 CLIPPER 2191 KEY ESCROW 2110 HOMEWORK CHAPTER 22 FOLKLORE 221 PERFECT FORWARD SECRECY 222 CHANGE KEYS PERIODICALLY 223 MULTIPLEXING FLOWS OVER A SINGLE SA 2231 THE SPLICING ATTACK 2232 SERVICE CLASSES 2233 DIFFERENT CRYPTOGRAPHIC ALGORITHMS 224 USE DIFFERENT KEYS IN THE TWO DIRECTIONS 225 USE DIFFERENT SECRET KEYS FOR ENCRYPTION VS INTEGRITY PROTECTION 226 USE DIFFERENT KEYS FOR DIFFERENT PURPOSES 227 USE DIFFERENT KEYS FOR SIGNING VS ENCRYPTION 228 HAVE BOTH SIDES CONTRIBUTE TO THE MASTER KEY 229 DON’T LET ONE SIDE DETERMINE THE KEY 2210 HASH IN A CONSTANT WHEN HASHING A PASSWORD 2211 HMAC RATHER THAN SIMPLE MD 2212 KEY EXPANSION 2213 RANDOMLY CHOSEN IVS 2214 USE OF NONCES IN PROTOCOLS 2215 DON’T LET ENCRYPTED DATA BEGIN WITH A CONSTANT 2216 DON’T LET ENCRYPTED DATA BEGIN WITH A PREDICTABLE VALUE 2217 COMPRESS DATA BEFORE ENCRYPTING IT 2218 DON’T DO ENCRYPTION ONLY 2219 AVOIDING WEAK KEYS 2220 MINIMAL VS REDUNDANT DESIGNS 2221 OVERESTIMATE THE SIZE OF KEY 2222 HARDWARE RANDOM NUMBER GENERATORS 2223 TIMING ATTACKS 2224 PUT CHECKSUMS AT THE END OF DATA 2225 FORWARD COMPATIBILITY 22251 OPTIONS 22252 VERSION NUMBERS 222521 VERSION NUMBER FIELD MUST NOT MOVE 222522 NEGOTIATING HIGHEST VERSION SUPPORTED 222523 MINOR VERSION NUMBER FIELD 22253 VENDOR OPTIONS 2226 NEGOTIATING PARAMETERS 2227 HOMEWORK