Skip to main content

Skip over site navigation to main content

developerWorks  >   Tivoli  >   Technical library  >  

Technical library view  RSS for Tivoli

 developerWorks
 Related links:    Redbooks  |  Forums  |  Support knowledge base Tivoli Software

Filter your search and/or enter a keyword. If you don't filter your search or enter a keyword, the search results will default to all results.
 
 
 
 
  1 - 9 of 9 results    Hide Summaries
Title   Type   Date  

Table that contains the results that meet the search criteria.

Encrypting with Stunnel
Most network-aware programs should use cryptography to protect data from prying eyes but many do not, either because they are legacy applications or because Secure Sockets Layer (SSL) can be difficult to add into applications. Stunnel is a program that allows both programmers and system administrators to easily add encryption to arbitrary TCP sessions. You can SSL-enable clients and servers with ease -- and you can do so without interfering with program source. 		Articles 01 May 2001  
 
Introduction to cryptography, Part 1: The broad view
Curiosity about other people's business and the hiding of information are characteristic of all human societies. With the advent of computing power and the development of advanced mathematical techniques, systems have become extremely sophisticated and it's now possible to construct ciphers that are effectively impossible to break. The algorithms used to encrypt and decrypt data fall into the two categories: secret key, or symmetric, cryptography where the same key is used for both processes; and public key, or asymmetric, cryptography where one key is used to encrypt and another to decrypt. Now just as important as information hiding is identifying senders, authentication, and non-repudiation. This article looks in broad detail at cryptography. Specific issues will be examined in more detail in upcoming articles in this series. 		Articles 01 Mar 2001  
 
Introduction to cryptography, Part 7: Contents and resource list
This article summarizes the contents in the "Introduction to cryptography" series and includes a glossary of terms. 		Articles 01 Mar 2001  
 
Introduction to cryptography, Part 5: Practical applications
Cryptography may be an interesting intellectual exercise, but its ultimate value lies in being deployed to facilitate secure communication of known integrity or to protect or control access in various ways. Different methods can be combined, as is the case with the widely used program PGP. Digital signatures, despite some concerns about their use, can be a useful means of confirming identity. Covert methods, specifically steganography, may sometimes be useful. Increasing use is being made of smartcards and of biometric techniques both as replacements for and in conjunction with conventional cryptosystems. Meanwhile, the growth in electronic transmission of value is a very important area so far as the deployment of cryptography is concerned. 		Articles 01 Mar 2001  
 
Introduction to cryptography, Part 6: Miscellaneous issues
Properly constructed ciphers with strong keys of adequate length, securely protected, are now effectively unbreakable. However, vulnerabilities still exist and in the case of asymmetric cryptography, it's important to know that a public key is genuine. A digital certificate can confirm this, although this is not absolute, depending instead on trust at some level. In addition, there are cases where special forms of signature are needed, perhaps allowing signing without viewing the content, or where one person needs to confirm to another, without revealing content, that he knows something secret. The exact time when something was signed digitally may need to be verified and this can be handled through digital timestamping. 		Articles 01 Mar 2001  
 
Introduction to cryptography, Part 4: Cryptography on the Internet
The Internet introduces a whole new raft of vulnerabilities. Organizations or individuals with whom you're communicating may be unknown or may be masquerading as someone else. Without getting paranoid about such issues, it's necessary to take suitable precautions against loss occasioned in various ways, whether by diversion of funds, the consequences of faulty authentication, loss of confidential information, repudiation of contracts and so on. Cryptography is central to managing this new level of risk, and this feature introduces some of the protocols and related mechanisms that are of particular relevance to Internet activity, including e-mail. 		Articles 01 Mar 2001  
 
Introduction to cryptography, Part 3: Asymmetric cryptography
The security afforded by asymmetric cryptosystems depends on mathematical problems that are difficult to solve, such as factoring large integers into primes. Public key systems use two keys such that one key, the public key, can be used to encrypt some text that can then only be decrypted using the securely-held private key. Alternatively, the private key can be used to encrypt some information that anyone with access to the widely-available corresponding public key can decrypt, so satisfying themselves that the message was generated by the holder of the private key. 		Articles 01 Mar 2001  
 
Introduction to cryptography, Part 2: Symmetric cryptography
Symmetric cryptography, otherwise known as secret key cryptography, has been in use for thousands of years in forms ranging from simple substitution ciphers to more complex constructions. However, developments in mathematics and the growth of computing power have made it possible to create ciphers that are effectively unbreakable. Symmetric systems are generally very fast but are vulnerable so that the key used to encrypt must be shared with whomever needs to decrypt the message. The IBM-developed cipher DES has been very widely used but is now at the end of its useful life and is due for replacement. Whatever cipher developers use in their applications, it's important to consider the methods used, to recognize the trade-offs that occur and to plan for a future with more powerful computer systems. 		Articles 01 Mar 2001  
 
Software security for developers: One-time pads
In this installment, Gary and John examine the one-time pad, which, if used properly, is an unbreakable encryption algorithm. The one-time pad has proven popular with spies, and its history predates World War II -- but does it actually make sense for real software applications? 		Articles 01 Oct 2000  
 
  1 - 9 of 9 results    Hide Summaries
Not finding what you're looking for? Suggest Content