ICT2213 Applied Cryptography Lecture 11: Key Management (Key Distribution)

What is the primary purpose of public-key cryptography in key distribution?

To distribute secret keys securely between sender and receiver

What is the purpose of a Public Key Infrastructure (PKI) in cryptography?

To create and manage digital certificates

What is the main advantage of the Web-of-Trust model compared to the PKI model?

It does not rely on trusted third parties

What is the purpose of a certificate chain in a PKI system?

To verify the authenticity of a public key Signup and view all the answers

What is the main problem with the PKI model mentioned in the text?

It relies on trusted third parties Signup and view all the answers

What is the main purpose of symmetric encryption in the context of key management?

To distribute secret keys securely Signup and view all the answers

Who can set up a trusted root CA?

Both profit-making and non-profit organizations Signup and view all the answers

How do applications like web browsers typically handle root CA certificates?

By hardcoding a list of presumed trusted root CAs Signup and view all the answers

Who certifies the public key of a root CA?

The root CA itself through a self-signed certificate Signup and view all the answers

What is the main concern regarding trusting root CAs?

Hardcoded root CAs may not always be trustworthy Signup and view all the answers

Why is it challenging to fully trust a self-signed certificate from a root CA?

There is no way to verify the authenticity of a self-signed certificate Signup and view all the answers

What is the primary purpose of PKI (Public Key Infrastructure) in the context of HTTPS websites?

To ensure users are visiting authentic and secure websites Signup and view all the answers

What percentage of phishing websites were reported to be using HTTPS in 2021?

82% Signup and view all the answers

In the Web-of-Trust model, how can a public key be certified?

Both B and C Signup and view all the answers

What is the potential risk associated with the Web-of-Trust model?

Careless or malicious users can impact its security Signup and view all the answers

Which protocol implements the idea of Web-of-Trust for secure communications?

PGP Signup and view all the answers

According to the 'Key continuity management' solution, how can a new public key be trusted?

By trusting public keys that have been in use for a long time Signup and view all the answers