Problem - Kevin Tafuro

oot certificates, 519–522
CAs, list, 520–522
obtaining and checking, 519
validating, 520
Root Report, 519
RSA algorithm, 142, 312
authenticated key exchange, 429–431
MACs, usage, 431
complexity of implementation, 333
converting binary strings to integers for
use with, 330
converting integers to binary strings, 331
DER-encoding of public keys, 353
dictionary attacks and, 335
EME-OAEP padding, 333–336
generating key pairs, 327–329
and man-in-the-middle attacks, 333
padding and, 333
private keys, decryption using, 336–337
private keys, signing with, 338–340
public keys, encryption using, 332–336
raw decryption using a private
key, 336–337
raw encryption with a public
key, 332–336
recommended key lengths, 313
secure signing and encryption, 343
signature verification with public
keys, 340–343
symmetric encryption, usage in
implementations, 333
RSA_blinding_on( ), 341
RSA_generate_key( ), 327
RSA_private_decrypt( ), 337
RSA_public_encrypt( ), 332, 334, 335
RSA_sign( ), 339
RSA_size( ), 333
RSASSA-PKCS1v1.5 signing standard, 338
RSASSA-PSS digital signing standard, 338
RtlSecureMemory( ), 707
S
SACL (system access control list), 41
safe primes, 318, 323
SafeStr library, 82, 85–88
functions and C equivalents, 86
SAFESTR_ALLOC( ), 86
SAFESTR_CREATE( ), 86
safestr_free( ), 87
safestr_istrusted( ), 88
safestr_reference( ), 87
safestr_release( ), 87
safestr_t type, 85
SAFESTR_TEMP( ), 86
SAFESTR_TEMP_TRUSTED( ), 88
salt, 133
dictionary attacks, prevention with, 141
hardening hash functions against birthday
attacks, 270
sanitizing the environment, 1–7
SASL (Simple Authentication and Security
Layer), 364
saved user and group IDs, 17
SAX (Symmetric Authenticated
eXchange), 369, 422–429
client side, 427–429
server-side, 423–427
Schneier, Bruce, 116
secure programming, 71
web sites, xviii
secure server certificates, 517
securely creating child processes, 26–28
securely signing and encrypting with
RSA, 343
SecureZeroMemory( ), 707
security
authentication mechanisms,
requirements, 365
bit size of algorithms, 313
function errors and, 700
initialization and, 1
weak vs. strong passwords, 391
security identifiers (see SIDs)
Security Support Provider Interface
(SSPI), 454
seeds, random numbers, 568
select( )
preventing file descriptor
overflows, 112–115
typical usage, 112
selecting a cipher mode, 162–171
selecting a public key algorithm, 311
selecting public key sizes, 312–314
self-signed certificates, 511
sequential nonces vs. random nonces, 134
Serpent, 158, 159
home page, 160
servers
authentication without
third-party, 438–444
for network logging, 734
SSL servers, creating, 457–460
SSL servers, improving efficiency with
caching, 460–463
This is the Title of the Book, eMatter Edition
Copyright © 2007 O’Reilly & Associates, Inc. All rights reserved.
Index | 755