Problem - Kevin Tafuro

preventing cross-site scripting, 103–107
preventing file descriptor overflows when
using select( ), 112–115
preventing format-string attacks, 75–78
preventing integer coercion and wrap-around
problems, 88–92
preventing SQL injection attacks, 107–110
PRFs (pseudo-random functions), 142
HMAC-SHA1, implementation with, 144
prime numbers, generating, 323–327
randomly, 317
printenv command (Unix), 3
printf( ), 75
printf( ) functions family, 120
Privacy Enhanced Mail (see PEM)
private CAs, 506
privilege separation, 21
privileges
dropping in setuid programs, 16–20
limiting risks of, 20–23
restricting, 7–16
priv_init( ), 22
privman library (Unix), 22
functions, 23
initialization, 23
PRNG_output( ), 601
PRNGs (pseudo-random number generators)
application-level generators,
using, 581–591
block ciphers, using as, 583
cryptographic generators, usable
output, 572
cryptographic hash functions, using
as, 588–591
cryptographic vs. noncryptographic, 569
OpenSSL, API in, 603
output with identical seeds, 570
proper usage of, 583
refereed proof of security bounds, 572
reseeding, 591–593
compression of entropy-containing
data, 593
reasons for, 592
seed size, 593
reseeding in parent and child
processes, 26
stream ciphers compared to, 582
stream ciphers, using as, 587
ProPolice, 83
pseudo-random functions (see PRFs)
pseudo-random number generators (see
PRNGs)
pthread_cond_broadcast( ), 724
pthread_cond_wait( ), 721
ptrace debuggers, detecting, 683
public CAs, 505
public key cryptography, 307–361
algorithms, selecting, 311
BIGNUM (see BIGNUM library)
binary representation of public keys and
certificates, 352–355
digital signatures, 311
DSA (Digital Signature
Algorithm), 347–352
exchange keys, 245
forward secrecy, ensuring, 445
key exchange, 311
key sizes, selecting, 312–314
recommended lengths, 314
keys and certificates, representing in
plaintext (PEM
encoding), 355–361
manipulating big numbers, 315
means to establish trust, lack of, 503
OpenSSL, disentangling public and
private keys, 329
prime numbers, generating or
testing, 323–327
Public Key Cryptography Standard
#5, 136
RSA (see RSA algorithm)
speed, 310
third-party validation of public keys, 309,
344
uses for, 309–311
public key infrastructure (see PKI)
PulseEvent( ), 724
putenv( ), 93, 95
environment variables and, 2
pwd.h file, 372
pw_name, 373
pw_uid, 373
This is the Title of the Book, eMatter Edition
Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.
Q
QueryPerformanceCounter( ), 152
QueueUserWorkItem( ), 718
quoting mechanisms, 74
R
Rabin-Miller test, 324
race conditions, 38, 43
rand( ), 570
RAND_add( ), 604
Index | 753