: .

: n
n(n-1)/2 .
,
.
:
.



409BC66F
42099AAF
C344040A

Zdravo
Alis

DC03403FF
67065CAB4

Zdravo
Alis

NP



Whitfield Diffie Martin Hellman

( 1976)
, RSA

1973 James Ellis, Clifford Cocks Malcolm

Williamson ( )

1997

Diffie-Hellman

Sec

Calc

Calc

p, g

Sec

p, g

ga mod p

(gb mod p)a mod p

=

gb mod p
(ga mod p)b mod p

1.

p=23
g=5.
2.
a=6,
(ga mod p)
o 56 mod 23 = 8.
3.
b=15,
(gb mod p)
o 515 mod 23 = 19.
4. (gb
mod p)a mod p
o 196 mod 23 = 2.
5. (ga mod
p)b mod p
o 815 mod 23 = 2.

RSA
: 1977
: 1983 MIT U.S.
Patent 4,405,829.
:
Ron Rivest -


MIT
Adi Shamir

Weizmann ,

Len Adleman -


p q
n=pq
:
(n)=(p-1)(q-1)
1<e< (n)
(n)

1<d< (n) d =e-1 mod (n)
(n, e)
d


Zn
Zn
y = Ek(m) = Me mod n
M = Dk(y) = yd mod n

 RSA
de 1 mod (n)

de ((n) + 1)

de = t((n) + 1), t >= 1

(Me)d Mt((n) + 1) mod n

(M (n))tM mod n
(1)tM mod n
M mod n

59
67 (p = 59, q = 67)
(n) = (59-1)(67-1) = 3828
e, 3828 > 1

=2669. ?
(2669, 3828) = 1

de 1 mod (n)

d * 2669 1 mod 3828

d (d, (n)) = 1

d = e-1 in Zn
d = 1625 (e-1 = 1625 mod 3828)
d=1625,
(e,n)
(2669, 3953)

 M

3128
. E(M):

(2669,3953)
E(m) = 31282669 mod 3953 = 3541

3541:

1625
35411625 mod 3953 = 3128

 d, e, p q
p q

e, ,
(216 1 = 65535 )
d, ,
( 512 2048 )

,
RSA.

RSA:

(
)

Rabin Miller

http://mathworld.wolfram.com/news/2002-08-07_primetest/

 RSA:
?
(n)
n
n = pq (n) = (p-1)(q-1), :

p2 (n - (n) + 1)p + n = 0
p q

,
.

!
p q.

DES vs. RSA

RSA 1500 DES

RSA






!

.
PGP SSL/TLS
,
.


Fp
Fp

m :
m = n mod p, 1 <= n < p

m
m? ,
(
)


2x mod 13
20 1 mod 13
28 9 mod 13
21 2 mod 13
29 5 mod 13
22 4 mod 13
210 10 mod 13
23 8 mod 13
211 7 mod 13
24 3 mod 13
25 6 mod 13
26 12 mod 13
27 11 mod 13



,
, :

p
Fp

k1 = (b )a

b
ko = (a )b

, k1=k2,


?
a, b, , and p
k

k = ab
.

,
(
)

 (Trusted
Authority)

TA
TA
,
: E (K, ID(Alis), T, L)
E
K , T , L

TA
- Kerberos


ElGammal

Taher ElGammal 1984

Digital Signature Algorithm

ECC

Neal Koblitz, Victor Miller, 1985

Knapsack

Ralph Merkle Martin Hellman


ECC
,
.
128-
GF(2256) , DSA
3072- 256-
, RSA 3072- .
ECC
109- ( 55
). GF(p), p>2,
2003.
10,000 Pentium PC ,
540 . GF()
2004 2600
17 .

NSA Suite B
Suite B:
Advanced Encryption Standard (AES)
128 256
Secure Hash Algorithm 2 (SHA-256 and SHA-384)

Elliptic-Curve Diffie-Hellman (ECDH)

Elliptic-Curve Digital Signature Algorithm (ECDSA)

256- , SHA-256 AES 128-

secret.
384- , SHA-384 AES 256-
top secret
.

 ?
-



,

,


,




(DSA, RSA, )

(MD5, SHA1, )

(MD5, SHA1, )

-
()

(DSA, RSA, )

-
()


(key
generation algorithm )
(signing
algorithm)
(verification
algorithm)

 vs

a.

V/s

b.

a.


b.


Full Domain Hash, RSA-PSS ,
RSA
DSA
ECDSA
ElGamal
Undeniable signature
SHA ( SHA-1) RSA
Rabin
Pointcheval-Stern

Schnorr

Public Key Infrastructure PKI

PKI
:
, , ,
,

- (self-signed)

ITU X.509 v3


:







()
()
()


(Certification Authority, CA)

Certification Practice
Statement (CPS)

(VeriSign, GlobalSign, Entrust,...)

PIN

,
.


,
.
PIN .


.

.

-

-.
-.

, -
,
.


( -)



-
.

.
.
.
iKEY


USB .