CS458-658 Network Security
HomeWork 3
From Stallings:
Review questions:
Problems (do not use computer for any of these):
FAQ:
A couple general comments:
- When you give your answers, e.g., to Problem 17.2, try be very specific
(this does not mean your answers should be long!). In particular, make
sure that a malicious grader (;-) could not modify the SSL protocol ever so
slightly (e.g. changing it to an earlier version) in such a way that all your
explanations would still apply but the protocol would be completely insecure.
- Beware: people in the industry and in the consumer markets often use the
word "encryption" as a magic spell to ward of security problems.
I hope that in this course you will learn that while encryption is an important
- often crucial - tool for security, it is not an answer by itself, and must
be used intelligently. Key management is always a campanion issue - never
forget to address it explicitely whenever you use encryption!