Flashcards for:
Public Key Infrastructure

Asymmetric encryption uses a public key to encrypt data, which can only be decrypted by the corresponding private key, ensuring that the public key cannot be used to derive the private key.

Both encryption types may be used together in situations where data encryption requires the speed of symmetric encryption combined with the security of key exchange provided by asymmetric encryption.

A CA is essential in PKI as it is responsible for the issuance and management of digital certificates, which form the backbone of secure digital identity verification.

Understanding the differences is essential for choosing the appropriate encryption method for specific security needs, balancing between speed, complexity, and managing keys.

The main challenge is scalability, as managing and sharing keys become complex with an increasing number of users and devices.

Alice generates a public and private key pair, keeps her private key secure, and distributes her public key. Bob encrypts a message with Alice's public key, creating a cipher text that only Alice's private key can decrypt.

Symmetric encryption uses the same key for both encryption and decryption, while asymmetric encryption uses one key for encryption (public) and a different, related key for decryption (private).

Keys in asymmetric encryption are generated through complex algorithms involving randomization and prime numbers, ensuring they are mathematically related and secure.

Poor key management can lead to security breaches, data loss, unauthorized access, and an inability to access encrypted data when necessary, causing operational disruptions.

Key management is crucial in PKI for ensuring proper generation, distribution, storage, and eventual revocation of keys, thereby maintaining data security and accessibility.

Key escrow involves a third party holding onto backup keys, providing a contingency mechanism to access encrypted data in cases where individual keys become inaccessible.

Asymmetric encryption in PGP and GPG is used for securing emails and files by encrypting them with the recipient's public key, ensuring only the recipient can decrypt them with their private key.

Sharing a private key can be controversial because it risks compromising the key's integrity, yet it might be necessary for organizational continuity and access to encrypted data.

Symmetric encryption is fast with low overhead, making it efficient for the encryption-decryption process.

PKI is a system in cryptography involving policies, procedures, hardware, and software for creating, distributing, managing, and storing digital certificates. It's crucial for encryption and trust in identities, often involving a Certificate Authority (CA).