Đang tải... (xem toàn văn)
Microsoft Word Solutions Crypto4e doc SOLUTIONS MANUAL CRYPTOGRAPHY AND NETWORK SECURITY PRINCIPLES AND PRACTICE FOURTH EDITION WILLIAM STALLINGS 2 Copyright 2006 William Stallings 3 © 2006 by William[.]
SOLUTIONS MANUAL CRYPTOGRAPHY AND NETWORK SECURITY PRINCIPLES AND PRACTICE FOURTH EDITION W ILLIAM STALLINGS Copyright 2006: William Stallings -2- © 2006 by William Stallings All rights reserved No part of this document may be reproduced, in any form or by any means, or posted on the Internet, without permission in writing from the author -3- NOTICE This manual contains solutions to all of the review questions and homework problems in Cryptography and Network Security, Fourth Edition If you spot an error in a solution or in the wording of a problem, I would greatly appreciate it if you would forward the information via email to ws@shore.net An errata sheet for this manual, if needed, is available at ftp://shell.shore.net/members/w/s/ws/S W.S -4- TABLE OF CONTENTS Chapter 1: Chapter 2: Chapter 3: Chapter 4: Chapter 5: Chapter 6: Chapter 7: Chapter 8: Chapter 9: Chapter 10: Chapter 11: Chapter 12: Chapter 13: Chapter 14: Chapter 15: Chapter 16: Chapter 17: Chapter 18: Chapter 19: Chapter 20: Introduction Classical Encryption Techniques Block Ciphers and the Date Encryption Standard 13 Finite Fields 21 Advanced Encryption Standard 28 More on Symmetric Ciphers 33 Confidentiality Using Symmetric Encryption 38 Introduction to Number Theory 42 Public-Key Cryptography and RSA 46 Key Management; Other Public-Key Cryptosystems 55 Message Authentication and Hash Functions 59 Hash and MAC Algorithms 62 Digital Signatures and Authentication Protocols 66 Authentication Applications 71 Electronic Mail Security 73 IP Security 76 Web Security 80 Intruders 83 Malicious Software 87 Firewalls 89 -5- CHAPTER INTRODUCTION ANSWERS TO QUESTIONS 1.1 The OSI Security Architecture is a framework that provides a systematic way of defining the requirements for security and characterizing the approaches to satisfying those requirements The document defines security attacks, mechanisms, and services, and the relationships among these categories 1.2 Passive attacks have to with eavesdropping on, or monitoring, transmissions Electronic mail, file transfers, and client/server exchanges are examples of transmissions that can be monitored Active attacks include the modification of transmitted data and attempts to gain unauthorized access to computer systems 1.3 Passive attacks: release of message contents and traffic analysis Active attacks: masquerade, replay, modification of messages, and denial of service 1.4 Authentication: The assurance that the communicating entity is the one that it claims to be Access control: The prevention of unauthorized use of a resource (i.e., this service controls who can have access to a resource, under what conditions access can occur, and what those accessing the resource are allowed to do) Data confidentiality: The protection of data from unauthorized disclosure Data integrity: The assurance that data received are exactly as sent by an authorized entity (i.e., contain no modification, insertion, deletion, or replay) Nonrepudiation: Provides protection against denial by one of the entities involved in a communication of having participated in all or part of the communication Availability service: The property of a system or a system resource being accessible and usable upon demand by an authorized system entity, according to performance specifications for the system (i.e., a system is available if it provides services according to the system design whenever users request them) 1.5 See Table 1.3 -6- ANSWERS TO PROBLEMS 1.1 Release of message contents Traffic analysis Masquerade Peer entity authentication Y Data origin authentication Y Access control Y Confidentiality Replay Modificatio n of messages Y Y Y Y Traffic flow confidentiality Data integrity Y Non-repudiation Y Availability 1.2 Encipherment Release of message contents Traffic analysis Masquerade Replay Modificatio n of messages Y Y Y Y Y Y Y Y Data integrity Authentication exchange Y Y Y Y Y Y Y Traffic padding Routing control Denial of service Y Digital signature Access control Denial of service Y Y Y Y Notarization -7- Y Y CHAPTER CLASSICAL ENCRYPTION TECHNIQUESR ANSWERS TO QUESTIONS 2.1 Plaintext, encryption algorithm, secret key, ciphertext, decryption algorithm 2.2 Permutation and substitution 2.3 One key for symmetric ciphers, two keys for asymmetric ciphers 2.4 A stream cipher is one that encrypts a digital data stream one bit or one byte at a time A block cipher is one in which a block of plaintext is treated as a whole and used to produce a ciphertext block of equal length 2.5 Cryptanalysis and brute force 2.6 Ciphertext only One possible attack under these circumstances is the brute-force approach of trying all possible keys If the key space is very large, this becomes impractical Thus, the opponent must rely on an analysis of the ciphertext itself, generally applying various statistical tests to it Known plaintext The analyst may be able to capture one or more plaintext messages as well as their encryptions With this knowledge, the analyst may be able to deduce the key on the basis of the way in which the known plaintext is transformed Chosen plaintext If the analyst is able to choose the messages to encrypt, the analyst may deliberately pick patterns that can be expected to reveal the structure of the key 2.7 An encryption scheme is unconditionally secure if the ciphertext generated by the scheme does not contain enough information to determine uniquely the corresponding plaintext, no matter how much ciphertext is available An encryption scheme is said to be computationally secure if: (1) the cost of breaking the cipher exceeds the value of the encrypted information, and (2) the time required to break the cipher exceeds the useful lifetime of the information 2.8 The Caesar cipher involves replacing each letter of the alphabet with the letter standing k places further down the alphabet, for k in the range through 25 2.9 A monoalphabetic substitution cipher maps a plaintext alphabet to a ciphertext alphabet, so that each letter of the plaintext alphabet maps to a single unique letter of the ciphertext alphabet 2.10 The Playfair algorithm is based on the use of a × matrix of letters constructed using a keyword Plaintext is encrypted two letters at a time using this matrix -8- 2.11 A polyalphabetic substitution cipher uses a separate monoalphabetic substitution cipher for each successive letter of plaintext, depending on a key 2.12 There is the practical problem of making large quantities of random keys Any heavily used system might require millions of random characters on a regular basis Supplying truly random characters in this volume is a significant task Even more daunting is the problem of key distribution and protection For every message to be sent, a key of equal length is needed by both sender and receiver Thus, a mammoth key distribution problem exists 2.13 A transposition cipher involves a permutation of the plaintext letters 2.14 Steganography involves concealing the existence of a message ANSWERS TO PROBLEMS 2.1 a No A change in the value of b shifts the relationship between plaintext letters and ciphertext letters to the left or right uniformly, so that if the mapping is one-to-one it remains one-to-one b 2, 4, 6, 8, 10, 12, 13, 14, 16, 18, 20, 22, 24 Any value of a larger than 25 is equivalent to a mod 26 c The values of a and 26 must have no common positive integer factor other than This is equivalent to saying that a and 26 are relatively prime, or that the greatest common divisor of a and 26 is To see this, first note that E(a, p) = E(a, q) (0 ≤ p ≤ q < 26) if and only if a(p – q) is divisible by 26 Suppose that a and 26 are relatively prime Then, a(p – q) is not divisible by 26, because there is no way to reduce the fraction a/26 and (p – q) is less than 26 Suppose that a and 26 have a common factor k > Then E(a, p) = E(a, q), if q = p + m/k ≠ p 2.2 There are 12 allowable values of a (1, 3, 5, 7, 9, 11, 15, 17, 19, 21, 23, 25) There are 26 allowable values of b, from through 25) Thus the total number of distinct affine Caesar ciphers is 12 × 26 = 312 2.3 Assume that the most frequent plaintext letter is e and the second most frequent letter is t Note that the numerical values are e = 4; B = 1; t = 19; U = 20 Then we have the following equations: = (4a + b) mod 26 20 = (19a + b) mod 26 Thus, 19 = 15a mod 26 By trial and error, we solve: a = Then = (12 + b) mod 26 By observation, b = 15 2.4 A good glass in the Bishop's hostel in the Devil's seat—twenty-one degrees and thirteen minutes—northeast and by north—main branch seventh limb east side— -9- shoot from the left eye of the death's head— a bee line from the tree through the shot fifty feet out (from The Gold Bug, by Edgar Allan Poe) 2.5 a The first letter t corresponds to A, the second letter h corresponds to B, e is C, s is D, and so on Second and subsequent occurrences of a letter in the key sentence are ignored The result ciphertext: plaintext: SIDKHKDM AF HCRKIABIE SHIMC KD LFEAILA basilisk to leviathan blake is contact b It is a monalphabetic cipher and so easily breakable c The last sentence may not contain all the letters of the alphabet If the first sentence is used, the second and subsequent sentences may also be used until all 26 letters are encountered 2.6 The cipher refers to the words in the page of a book The first entry, 534, refers to page 534 The second entry, C2, refers to column two The remaining numbers are words in that column The names DOUGLAS and BIRLSTONE are simply words that not appear on that page Elementary! (from The Valley of Fear, by Sir Arthur Conan Doyle) 2.7 a C B R O U Y R T U S T R E D M T C E S A T W 10 Y A P T S E T E R F O P T I H I U O V E U F T T L E D M N E D L R O H L L E T I N I B I G E A E T H G I S R E A T R F H E H F T I N H H F T E A T Y R N D I I R O L T A O U G S N T B E H I H T E T E R R A F R L I D L T F O E T O L H M E 10 W H U T E L E I T D O E Y H A T T U C M R H R G T A I O E N K F T I Y O N V S E S T U S R U I E A D C I S R N G B U T L U N T E D S I F W R -10-