[Solved] SIL765 Assignment 2-Certification Authority (CA)

1. 0: Certification Authority (CA)

You are required to (a) build a CA, and (b) build clients that wish to confidentially send messages suitably encrypted with public key of receiver, but only after they know the other clients public key in a secure manner. There are two ways for client A to know the public key of another client, B:

• Receive a certificate from B itself, or
• Get it from CA (which is rarely done).

We will presently limit the fields in the certificate to the following:

CERT_A = ENC_PRCA (ID_A, PU_A, T_A, DUR_A, INFO_CA) where

• PRCA is private key of certification authority (PUCA is public key of certification authority)
• ID_A is user ID,
• PU_A is public key of A,
• T_A is time of issuance of certificate. To do so, you will need to:
• Decide you will use method (b) to obtain each others public key,
• Assume:
  1. that clients already (somehow) know the public key of the certification authority,
  2. that the clients have their corresponding private keys with themselves, and
  3. that CA has the public keys of all the clients,
• Messages from CA to clients are encrypted using RSA algorithm and CAs private key,
• Encrypted messages are sent/received between clients once they have each other clients public key, and finally
• Find a way to generate and encode current time.

Use the above to ensure client A can send 3 messages to B, viz Hello 1, Hello 2, and Hello 3. Client B in turn responds with ACK 1, ACK 2, and ACK 3 to messages received from A.

Project no. 1: Public Key Distribution Authority (PKDA)

You are required to (a) build a PKDA, and (b) build clients that wish to confidentially send messages suitably encrypted with public key of receiver, but only after they know the other clients public key in a secure manner.

You are required to (a) build a, and (b) build clients that wish to send messages suitably encrypted with public key of receiver but of course only after they know each others public key in a secure manner. Specifically use the scheme described below.

To do so, you will need to:

• Assume:
  4. that clients already (somehow) know the public key of the distribution authority, PKDA,
  5. that the clients have their corresponding private keys with themselves, and
  6. that PKDA has the public keys of all the clients,
• Messages between PKDA and clients are encrypted using RSA algorithm and PKDAs private key,
• Encrypted messages are sent/received between clients once they have each other clients public key, and finally
• Find a way to generate and encode current time and nonces.

Use the above to ensure client A can send 3 messages to B, viz Hi 1, Hi 2, and Hi 3. Client B in turn responds with Gotit 1, Gotit 2, etc. to messages received from A.