PKI Cryptography 2

Question 1

central repository for storing cert.’s, allows admins to set policies in one location and centrally manage all users certificates.

Answer 1

Certificate Server

Question 2

ensures key is unusable for a period of time, suspend rather than expire to make them temporarily invalid.

Answer 2

Certificate Suspension

Question 3

est. policies for destroying old keys, when key or cert. is no longer useful destroy and remove from system, then notify CA so CRL and OCSP servers can be updated, deregistration should occur when key is destroyed.

Answer 3

Certificate Lifecycle (Destruction)

Question 4

EXTRA :

HTTPS request made, server sends cert., client authenticates servers cert. (client uses CA’s public key to validate CA’s digital signature), browser generates session key, server decrypts session key with their private key, secure connection using session key.

TLS uses port 443

Answer 4

TLS Handshake Process