Asymmetric Key Encryption Same key is used for both encryption and decryption Different keys are used for encryption and decryption Speed of encryption or decryption is very fast Speed of encryption or decryption is comparatively slow Plain text and cipher text are of same size The size of cipher text is always greater than plain text. Algorithms like DES, AES, RC4 uses symmetric key encryption Algorithms like RSA, ECC, DSA use asymmetric key encryption Provides confidentiality Provides confidentiality, authenticity and non-repudiation The number of key used grows exponentially with the number of users The number of key used grows linearly with the number of users Figure . Data Encryption and Decryption process Encryption SAMPLE ENCRYPTION AND DECRYPTION PROCESS + + Plain text SSN: - - SSN: - - SSN: Bc9Yzwoga XBzdWogZG 9sb3lgc2I0IG FtZXQNCg... SSN: Bc9Yzwoga XBzdWogZG 9sb3lgc2I0IG FtZXQNCg...
Plain text Cipher text Cipher text Algorithm Algorithm Decryption version CHAPTER version CHAPTER - - - - Chapter E-Commerce Security Systems The digital certificate are being issued by a licensed Certifying Authority (CA). NIC, Safescript, TCS, MTNL, e-Mudhra are some of the authorized Certifying Authorities under Government of India. Digital signature A digital signature is a mechanism that is used to verify that a particular digital document, message or transaction is authentic. It provides the receiver the guarantee that the message was actually generated by the sender.
It also confirms that the information originated from the signer and has not been altered by a cracker in the middle. Digital signatures can provide the added assurances of evidence to the origin, identity and status, as well as acknowledging the consent of the sender. A security token is a hardware component that are used to identify and authenticate users. .
. Authentication Technology The main role of security certification is to ensure Authentication, Integrity and Non-repudiation. This can be achieved through digital signatures and digital certificates. Digital certificates A digital certificate is an electronic document used to prove the ownership of a public key.
This certificate includes the information about the sender’s identity, digital signature and a public key.