wide95.dvi

Size: px

Start display at page:

Download "wide95.dvi"

ありおきひろもり
5 years ago
Views:

1 10 261

3 1 1.1 ( ) WWW(World Wide Web) WWW SSL(Secure Socket Layer)[66] SHTTP(Secure Hypertext Transfer Protocol)[67] RSA () ( 1 ( ) S-HTTP SSL 263

4 WIDE ) (CA - Certication Authority) CA CA CA ( ) PEM(Privacy Enhanced Mail) SSL S-HTTP CA 1.3 InterAuth-WG, 10 (a) (VA -Verication Authority) CRL(Certicate Revocation List) VA(Verication Authority) IETF PKIX-WG (Online-Verication Service) [68] (b) ITU-T X.509 X OSI 1 Internet

5 X.509v3 1.1: X.509v3 alternative name DNS certicate policy key attributes key usage restriction basic constraints information access authority key identier CRL distribution point CRL (c)

6 WIDE (d) (e) WWW (1) (2) (3) CA Web Web (f)web Web Web Secure HTTP Web Web

7 (g)ca CA CA (h)pet3 telnet telnet (i) (j) ( ) X.509

8 2 X.509 [69] Certication Authority (CA) version 3 [70] 2.1 X.509 Version 3 ASN.1 Certificate ::= SIGNED { SEQUENCE { version [0] INTEGER { v1(0), v2(1), v3(2) } DEFAULT v1, serialnumber INTEGER, signature AlgorithmIdentifier, issuer Name, validity Validity, subject Name, subjectpublickeyinfo SubjectPublicKeyInfo, issueruniqueid [1] IMPLICIT UniqueIdentifier OPTIONAL, subjectuniqueid [2] IMPLICIT UniqueIdentifier OPTIONAL, extensions [3] Extensions OPTIONAL } } version serial number signature issuer validity subject subject public key info version 1 version 2 version 3 ICAT 268

9 2.2 unique identier version 2 CA BIT STRING PKIX [68] CA ( ) 2.3 issuer / subject alternative name AltNames ::= SEQUENCE OF GeneralName GeneralName ::= CHOICE { othername [0] INSTANCE OF OTHER-NAME, rfc822name [1] IA5String, dnsname [2] IA5String, x400address [3] ORAddress, directoryname [4] Name, edipartyname [5] IA5String, url [6] IA5String } IP 2.4 certicate policy PKIX ISO [70] PolicyInformation ::= SEQUNCE OF SEQUENCE { certpolicyid CERTIFICATE-POLICY.&id, qualifier CERTIFICATE-POLICY.&Qualifier } OPTIONAL } CERTIFICATE-POLICY ::= CLASS { &id OBJECT IDENTIFIER UNIQUE, &Qualifier OPTIONAL } WITH SYNTAX { POLICY-IDENTIFIER &id

10 WIDE [QUALIFIER-TYPE &Qualifier] } VeriSign [71] 2.5 key attributes (private key) KeyAttributes ::= SEQUENCE { keyidentifier KeyIdentifier OPTIONAL, intendedkeyusage KeyUsage OPTIONAL, privatekeyusageperiod PrivateKeyValidity OPTIONAL } KeyIdentifier ::= OCTET STRING PrivateKeyValidity ::= SEQUENCE { notbefore [0] GeneralizedTime OPTIONAL, notafter [1] GeneralizedTime OPTIONAL } KeyUsage ::= BIT STRING { digitalsignature (0), nonrepudiation (1), keyencipherment (2), dataencipherment (3), keyagreement (4), keycertsign (5), offlinecrlsign (6) } 2.6 key usage restriction keyusagerestriction ::= SEQUENCE { certpolicyset SEQUENCE OF CertPolicyId OPTIONAL, -- OID restrictedkeyusage KeyUsage OPTIONAL } 2.7 basic constraints cert path

11 basicconstraints ::= SEQUENCE { subjecttype BIT STRING { ca (0), endentity (1) }, pathlenconstraint INTEGER OPTIONAL, permittedsubtrees SEQUENCE OF GeneralName OPTIONAL, excludedsubtrees SEQUENCE OF GeneralName OPTIONAL } ISO (policy constraints ) 2.8 information access ISO CA 2.9 authority key identier AuthorityKeyId ::= SEQUENCE { keyidentifier [0] KeyIdentifier OPTIONAL, certissuer [1] Name OPTIONAL, certserialnumber [2] CertificateSerialNumber OPTIONAL } KeyIdentifier ::= OCTET STRING CA PKIX 2.10 subject directory name AttributesSyntax ::= SEQUENCE OF Attribute

12 WIDE 2.11 CRL distribution point Certicate Revocation List (CRL) CA CRL CRLDistPointsSyntax ::= SEQUENCE OF DistributionPoint DistributionPoint ::= SEQUENCE { distributionpoint Name, reasons ReasonFlags OPTIONAL } ReasonFlags ::= BIT STRING { unused (0), keycompromise (1), cacompromise (2), affiliationchanged (3), superseded (4), cessationofoperation (5), certificatehold (6) }

13 3 VA VA {VA 3.1 VA CA ( CRL )VA VA / TCP BER / VA primary key attributes CA VA VA VA VA VA CA? DB 8 8 A AU ( CRL) VA

14 WIDE 3.2 VARequest ::= [APPLICATION 1] OPTIONALLY SIGNED SET { version [0] INTEGER default 0, } issuer [1] Name, CHOICE { [2] SEQUENCE { subject Name, issueruniqueidentifier [0] BIT STRING OPTIONAL subjectuniqueidentifier [1] BIT STRING OPTIONAL }, serialnumber [3] INTEGER }, requestverificationdateandtime [4] UTCTime OPTIONAL, requestoriginator [5] Name OPTIONAL, requestidentifier [6] OCTET STRING OPTIONAL 1. version: 2. issuer subject issueruniqueidentifier subjectuniqueidentifier serialnumber: / 3. requestverificationdateandtime: / 4. requestoriginator: () 5. requestidentifier: 3.3 CVSReply ::= [APPLICATION 2] SEQUENCE { SIGNED SET { version [0] INTEGER default 0, issuer [1] Name, CHOICE { [2] SEQUENCE { subject Name, issueruniqueidentifier [0] BIT STRING OPTIONAL subjectuniqueidentifier [1] BIT STRING OPTIONAL }, serialnumber [3] INTEGER }, requestidentifier [4] OCTET STRING OPTIONAL,

15 verificationresult [5] VerificationResult, revokedreason [6] RevokedReason OPTIONAL, revokedorholddateandtime [7] UTCTime OPTIONAL, holdexpirationdateandtime [8] UTCTime OPTIONAL, holdinstructioncode [9] OBJECT IDENTIFIER OPTIONAL, invaliditydateandtime [10] UTCTime OPTIONAL, requesteddateandtime [11] UTCTime OPTIONAL, verificationdateandtime [12] UTCTime, verificationidentifier [13] OCTET STRING OPTIONAL }, CertificationPath OPTIONAL } VerificationResult ::= ENUMERATE { valid (0), notyetvalid (1), finished (2), revoked (3), hold (4) } RevokedReason ::= ENUMERATE { unspecified (0), keycompromise (1), cacompromise (2), affiliationchanged (3), superseded (4), cessationofoperation (5) } 1. version: 2. issuer subject issueruniqueidentifier subjectuniqueidentifier serialnumber: 3. requestidentifier: 4. VerificationResult: hold holdexpirationdate holdinstructioncode 5. revokedreasonflags: 6. revokedorholddateandtime: 7. invaliditydateandtime: 8. requesteddateandtime: 9. verificationdateandtime: / /

16 WIDE 10. verificationidentifier: 11. CertificationPath: 3.4 X.509 Version 3 CA CA

17 CA CA (1) CA CA CA (2) VA 277

18 WIDE A DTS(digital timestamping service) [72] 4.3 ( ) (1)

19 (2) 4.4 CA CA CA CA CA CA CA () CA : CA CA CA ( ) CA : CA CA CA CA CA : CA

20 WIDE VA : VA CA VA CA VA CA ( CRL ) 4.7 CA : CA CA CA CA ID: CA 1 ID ID = ID + CA CA 4.1 < 1 > < 6 > ( 4.1 < 3 > < 6 >) 4.9

21 <3> CA VA <2> <4> <1> <5> <6> <1> <2> CA <3> VA <4> <5> <6> 4.1: 4.10 (1) ( 4.1) 4.2 (2)

22 WIDE 4.1: A B () C 4.2: ( ) A B C () ( ) (100 ) () ( ) (1 ) ( ) () (2.1) () () (2.2) (2.3)

23 (3) ( ) (3.1) 4.1 (3.2) (3.1) 2 (3.3) a) Kerberos[73] Kerberos [74] Kerberos b)

24 WIDE c) (Sp2) Sp2 (Ss2) Sp2 A Bp(Sp2) B S Sp2 ( ) Bp: B Bp(x): x Bp Sp2: S Ss2: S A Ss2( ) B Sp2(Ss2( )) S 4.2: Sp2 Ss2 Sp2 Sp2

25 VA 4.3 ( ) 4.3: 1 (1) VA (1.1)VA VA VA 1Kbyte VA (1.2) VA

26 WIDE (2) ( ) ID VA 2 4.4: ID ( ID+CA + ) ID ID+invalid ID {1994 CA CA ID + secret ID [ ] [] [ ] [invalid] [secret]

27 5 PET PET (Privacy Enhanced Telnet) / PET 5.1. [75] 5.2 " PET

28 WIDE 5.1: Telnet 5.3 PET 2 \ " 5.2: client( )/server( )

29 PK S 2. PK S 3. DEK 1 4. PK S (DEK 1 ) 4. PK S (DEK 1 ) 5. PK S (DEK 1 ) SK S DEK 1 6. DEK 2 8. DEK 1 (DEK 2 ) 9. DEK 1 (DEK 2 ) DEK : 1, 2, PK SK s; c DEK (Data Encryption Key) 1 6 PET RSA DES CFB(Cipher Feed Back)

30 WIDE - 1. CERT S 2. CERT S 3. CERT S CERT I PK I 4. ACK or NACK 5. ACK NACK 6. r 7. r 8. SK C (r) 9. SK C (r) CERT C PK C r r=r 0 ACK r 6= r 0 NACK( ) 5.2: 5.5 PET 2 CERT I r ITU-TS X.509[69] 3

31 : /c=jp/o=icat/ou=certication Authority /c=jp/o=abc/ou=dep./cn=yamada RSA 7e29b196fd3ecead9 111 taro@abc.co.jp md2 with RSA 86d7bc4d24ea 111 [76] A A A B PET \*" 754:/c=JP/o=Certication Authority:/c=JP/o=ABC/ou=Dep./* \:" \*" ABC

32 WIDE PET 1! 2! 7 1! 2! 3! 4! 7 1! 2! 3! 4! 5! 7 1! 2! 3! 4! 6! 7 1! 2! 3! 4! 5! 6! Privacy Enhanced Telnet \telnet" (PET) PET RSA OSISEC RSA DES Eric DES SS2(30MIPS) 8byte CFB 1Mbps 5.9 PET 1. PET PET p(pet p) namachu

33 : PET p; q(256bit ), d(512bit ) n = pq (512bit) e = (17bit) srandam(8) + DESinCipherFeed Back mode (CFB) RSA Quisquarter() ITU-T X.509 Message-Digest MD2 RSA 5.5: [kbps] RSA RSA DES 1974 DES 1917 MD5 3165

34 WIDE % pet namachu Trying Connected to namachu. Escape character is '^]'. You don't set your security level. Now, I set your security level to remote server's security level 5. Remote server is requesting security level 5. We are going to talk on level 5. Now, exchanging a data encryption key. Please wait. Your name is C=JP O=Fujitsu Laboratories Ltd. OU=Information Processing Network Center CN=Yasutsugu Kuroda address=kuroda@flab.fujitsu.co.jp Your certificate is valid. Your authentication is valid. Remote server name is C=JP O=Fujitsu Laboratories Ltd. OU=IPNC CN=namachu.center.flab.fujitsu.co.jp address=kuroda@namachu.center.flab.fuj itsu.co.jp Server's certificate is valid Server's authentication is Valid SunOS UNIX 4.1 (namachu) (ttypb) login: p

35 % pet -p 3 namachu Trying Connected to namachu. Escape character is '^]'. You are requesting security level 3. Remote server is requesting security level 5. We are going to do security level 5. Exchanging data encryption key... Remote server name is C=JP O=Fujitsu Laboratories Ltd. OU=IPNC CN=namachu.center.flab.fujitsu.co.jp address=kuroda@namachu.center.flab.fuji tsu.co.jp Server's certificate is valid Server's authentication is Valid Your name is C=JP O=Fujitsu Laboratories Ltd. OU=Information Processing Network Center CN=Yasutsugu Kuroda address=kuroda@flab.fujitsu.co.jp Your certificate is valid. Your authentication is valid. SunOS UNIX 4.1 (namachu) (ttyp8) login:

36 WIDE % pet -p 4 namachu Trying Connected to namachu. Escape character is '^]'. You are requesting security level 4. Remote server is requesting security level 5. Security level negotiation is fault. telnet PET % pet -p 4 namachu Trying Connected to namachu. Escape character is '^]'. You are requesting security level 4. Remote server is requesting security level 5. Security level negotiation is fault. telnet PET % telnet namachu Trying Connected to namachu. Escape character is '^]'. This server is a Privacy Enhanced Telnet. It is requesting security level 5 communication. Please access it using Privacy Enhanced Telnet at the next time. Bye. Connection closed by foreign host. pet telnetd

37 % pet flab Trying Connected to flab. Escape character is '^]'. SunOS UNIX (azalea) 2. PET3 (petd Makele.generic SERVERMANAGEMENTFILE) F peek % peek -s < CERTFILE >> petuser petuser CERTFILE peek petuser

38 WIDE % peek -c <.cert Serial No = 36F <---- Validity from Z to Z issuer: C=JP O=WIDE OU=Certification Authority subject: C=JP O=Fujitsu Laboratories Ltd. OU=Information Processing Network Center CN=Yasutsugu Kuroda address=kuroda@flab.fujitsu.co.jp signature: md2withrsaencryption publickey: alg = rsaencryption 3. telnetx zmodem, xmodem, bplus TELNETX zmodem text le 6150byte binary 5.10 PET

39 / / X.509 version 3 RSA keyed MD5[77] IETF PET FJPEM[78, 79, 80, 81] IETF PKIX WG(Public Key Interface (X.509) WG) ISPP WG(Internet Secure Payment Protocol WG)

40 WIDE

/02/ /09/ /05/ /02/ CA /11/09 OCSP SubjectAltName /12/02 SECOM Passport for Web SR

/02/ /09/ /05/ /02/ CA /11/09 OCSP SubjectAltName /12/02 SECOM Passport for Web SR for Web SR Certificate Policy Version 2.50 2017 5 23 1.00 2008/02/25 1.10 2008/09/19 1.20 2009/05/13 5 1.30 2012/02/15 5.6 CA 1.40 2012/11/09 OCSP SubjectAltName 2.00 2013/12/02 SECOM Passport for Web