to download - Secure Support - SafeNet

Chapter 1IntroductionSecurity OverviewThere are a number of simple cryptographic terms mentioned throughout thismanual which the reader is required to understand. This section is intended as abrief overview of what these terms mean in the context of the ProtectFile product.In the field of cryptography, the term key refers to a value which is used to encryptdata using an algorithm. There are many different types of keys and algorithms.The term algorithm refers to a defined mathematical calculation that is used toencrypt, decrypt, or verify data using a key.Key ManagementKeys are used to protect or unlock data. It is important to correctly manage yourkeys in order to minimize the risk of compromise to your protected files. InProtectFile, key management is performed in software and, for the most part, anadministrator or user of ProtectFile does not need to know or perform any specialactions to manage their keys.ProtectFile Premium can be configured to operate in two different modes, eachusing a different type of key management. These are:Domain mode, which uses symmetric key managementPKI mode, which uses asymmetric key managementProtectFile Business uses symmetric key management.The following sections are presented as an overview to help explain the benefitsand disadvantages within each of the discussed key management environments. It isup to the individual to select which type of key management is considered best for aparticular application, or contact SafeNet Support for assistance.Symmetric Key ManagementSymmetric encryption systems (for example, DES) have been used in governmentand business applications for a long time. The encryption algorithm is published toallow independent and widespread analysis of the algorithms. The security of thesesystems depends on the security and strength of a secret key shared by sender andrecipient.2 © SafeNet, Inc.