Presentation from Infosecurity Canada by Ben Rothke on Everything an Audit Professional needs to know about encryption in 50 minutes

10. Objectives of cryptography Confidentiality Integrity Authentication Interception Modification Fabrication Are my communications private? Has my communication been altered? Who am I dealing with?

15. Everything You Need to Know about Cryptography

17. Advanced cryptography terms (that you don’t need to know) RSA Factoring Challenge PKCS Discrete logarithms Root CA block cipher One-time pad Factoring methods Covert channel Blind signature scheme chosen ciphertext attack key escrow Pollard Rho method discrete logarithm Kerberos CP & CPS Capstone meet-in-the-middle attack linear cryptanalysis Adaptive-chosen-ciphertext attach Operational policy and procedures One-way function tamper resistant Exclusive-OR multiple polynomial quadratic sieve differential cryptanalysis Diffie-Hellman key exchange Iterated block cipher Factoring methods Key Management General purpose factoring algorithm CAPI Dictionary attack Random numbers SKPI Private exponent chosen plaintext attack Elliptic curve discrete logarithm problem NSA General purpose factoring algorithm Brute force attack CRL Session key Prime numbers Quantum cryptography Fields and rings Vector spaces and lattices Boolean expressions Number field sieve Provably secure Threshold cryptography key recovery Modular arithmetic Galois field Goppa code Random number generation Cryptographic tokens X.509v3 ANSI X9.24 ICV PRNG ASN.1 FIPS EAL BSAFE IDEA

19. Paper vs. Electronic trust

21. Symmetric Cryptography Q4 sales well below forecast “ BxWv;5df~TmWe#4^,sdgfMwir3:dkJeTsY@!q3” Q4 sales well below forecast Same Key (Secret) Encrypt Decrypt

27. Symmetric vs. Asymmetric Secret-key (symmetric) encryption Public-key (asymmetric) encryption

28. Public-key Cryptography CFO to resign next week “ BxWv;5df~TmWe#4^,sdgfMwir3:dkJeTsY@!q3” Encrypt Decrypt CFO to resign next week Public Key of recipient Private Key of recipient

29. Portrait of a Public Key

31. The n 2 Problem

41. Digital Signatures & Certificates

47. PGP keyring of public keys

48. PGP encryption/decryption

49. Digital signing

50. Digital signature verification

51. Additional References

54. Conclusions

57. Ben Rothke CISSP CISM Security Consultant NY Metro | BT INS [email_address]