Security - Datamatiker 4. semester

---

Project maintained by DatSecDK Hosted on GitHub Pages — Theme by mattgraham

← Back

Week-08-Crypto,SSH, SSL, Certificates and more

Cryptograhy, Certificates, Digital Signatures

This is going to be a pretty heavy week when it comes to theory. Most of the exercises will not involve code, but steps necessary to understand and USE the terms below, and see how they are all required to get a secure connection in a browser

• SSH and SSH Tunnels
• Symmetric Encryption
• Asymmetric Encryption
• Hashing and Hash Digests
• Digital Signatures
• Certificates
• Certificate Authorities and Certificate Trust Hierarchies
• :red_circle: MAC (Message Authentication Code)
• :red_circle: Cipher Suites

What to Install

WireShark if not already done. If you have installed Kali Linux, just continue with the version available here.

WireShark SSL-handshake sample we did in the class wireshark-sample (TBD)

Wednesday March 20 th.

What to Read or Watch :information_source:

• :book: Understanding the SSH Encryption and Connection Process (30 min.)
• :tv: What is SSH? (4 min.)
• :tv: Intro to SSH and Keys (13 min.)
• :book: SSH Tunnel (15 min.) <!–
• Man in the middle attack Read the first part (Example) of the article and skim the rest –>

  Slides

  Slides-day1

  Exercises :memo:

• SSH-SSL with MySQL

Thuersday March 21 th.

What to Read or Watch :information_source:

• :tv: Introduction to Cryptographic Keys and Certificates (18. min)
• :tv: What are certificates (15 min.) (Covers more or less the same topics as the next video, I do however recomment both)
• :tv: What is PIK (watch the first 8 minutes)
• :book: Symmetric vs Asymmetric Encryption (10 min.)
• :full_moon: :book: Cryptographic hash function (5-10. min Skim only)
• :red_circle: :book: Cipher Suites (6 min. skim only so you know what it is conceptually) neccesary to understand parts of the Wireshark demo

Exercises :memo:

• SSH-SSL with MySQL (complete)
• SSL Handshake We will do this together in the class
• Tomcat with SSL and preparing for the exam