Introduction to Public Key Encryption and Java Security

Mechanism of Internet Explorer and Netscape.

Cheng-Wen Chen

Internet Security Issues

• Eavesdropping

• Tampering

• Impersonation

Public Key Cryptography

• Encrypt & Decrypt

• Detect Tampering

• Identify Signer (Authentication)

• Nonrepudiation

Encrypt & Decrypt

Detect Tampering

Identify Signer

• Digital certificate

• To identify individuals, companies…

• Certificate Authority (CA)

Outside Sandbox - Netscape

• Capability class

• Fine-grained access control

• netscape.security.PrivilegeManager.enablePrivilege(“UniversalPrintJobAccess”);

• key3.db

• cert7.db

Outside Sandbox - IE

• Cabnet file

• Default Permission

• yourKeyName.pvk

• yourCertName.spc