CS458-658 Network Security

HomeWork 3

From Stallings:

Review questions:

• 17.4
• 17.5
• 17.6

Problems (do not use computer for any of these):

• 17.1
• 17.2
• 17.3

• 13.8
• 13.9
• 13.10
• 13.13

FAQ:

A couple general comments:

• When you give your answers, e.g., to Problem 17.2, try be very specific (this does not mean your answers should be long!). In particular, make sure that a malicious grader (;-) could not modify the SSL protocol ever so slightly (e.g. changing it to an earlier version) in such a way that all your explanations would still apply but the protocol would be completely insecure.
• Beware: people in the industry and in the consumer markets often use the word "encryption" as a magic spell to ward of security problems. I hope that in this course you will learn that while encryption is an important - often crucial - tool for security, it is not an answer by itself, and must be used intelligently. Key management is always a campanion issue - never forget to address it explicitely whenever you use encryption!