加密学教程（Cryptography Tuturials）目录
加密学教程（Cryptography Tuturials）
太阳火神的美丽人生 (http://blog.csdn.net/opengl_es)
本文遵循“署名-非商业用途-保持一致”创作公用协议
Cryptography Tutorials - Herong's Tutorial Notes
Version 4.00
Dr. Herong Yang
Copyright © 1998 - 2007 by Dr. Herong Yang. All rights reserved.
Table of Contents
About This Book
Terminology
- Cryptography Terminology
Basic Concepts
- Cryptography
- Function
- Encryption
Cipher - DES Algorithm
- Block Cipher
- DES (Data Encryption Standard) Cipher Algorithm
- DES Key Schedule (Round Keys Generation) Algorithm
- DES Decryption Algorithm
DES Algorithm - Illustrated with Java Programs
- DESSubkeysTest.java - DES Key Schedule Algorithm Illustration
- DESCipherTest.java - DES Cipher Algorithm Illustration
DES Algorithm - Java Implementation
- CipherDES.java - A Simple Java Implementation of DES
- Test Cases of DES Encryption and Decryption
DES Algorithm - Java JCE SUN Implementation
- DES Java Implementation by Sun
- Using DES Algorithm in JDK JCE Package
- Test Cases of DES Encryption and Decryption
- What Is PKCS5Padding?
- JceSunDesPaddingTest.java - JCE DES Padding Testing Program
DES Algorithm - Operation Modes and JCE SUN Implementation
- DES Encryption Operation Modes
- What is ECB (Electronic CodeBook) Operation Mode?
- What is CBC (Cipher Block Chaining) Operation Mode?
- What is CFB (Cipher FeedBack) Operation Mode?
- What is OFB (Output FeedBack) Operation Mode?
- Sun Java Implementation of DES Operation Modes
- JceSunDesOperationModeTest.java - JCE DES Operation Mode Testing Program
- Test Cases of DES Operation Modes
DES Algorithm - Stream Cipher Modes and JCE SUN Implementation
- DES in Stream Cipher Modes
- CFB (Cipher FeedBack) Operation Mode as a Stream Cipher
- OFB (Output FeedBack) Operation Mode as a Stream Cipher
- Sun Java Implementation of DES Operation Modes
- JceSunDesStreamCipherTest.java - JCE DES Stream Cipher Mode Testing Program
- Test Cases of DES Stream Cipher Modes
DES Algorithm - PHP Implementation in mcrypt
- mcrypt Library for PHP
- mcrypt Encryption Functions
- des_mcrypt_operation_mode_test.php - mcrypt Operation Mode Test PHP Script
- Block Padding in mcrypt
- Other PHP Implementations of DES Algorithm
JDK/JCE - Cipher for Encryption and Decryption
- The Cipher Class
- JceSecretCipher.java - Cipher with Secret Key
- JcePublicCipher.java - Cipher with Private and Public Key Pair
Cipher - Blowfish Algorithm
- Block Cipher
- Blowfish Cipher Algorithm
- Blowfish Key Schedule (Sub-Keys Generation) Algorithm
- BlowfishJ - Java Implementation by Markus Hahn
- Blowfish Decryption Algorithm
- 8366 Hex Digits of PI
Message Digest - MD5 Algorithm
- What is MD5?
- MD5 Algorithm Overview
- MD5 Implementation in Java
- MD5 Implementation in PHP
- MD5 Implementation in Perl
Message Digest - SHA1 Algorithm
- What is SHA1?
- SHA1 Algorithm Overview
- SHA1 Implementation in Java
- SHA1 Implementation in PHP
- SHA1 Implementation in Perl
OpenSSL - Installation on Windows
- What is OpenSSL?
- Installing OpenSSL on Windows
OpenSSL - Generating RSA Private and Public Keys
- What is RSA?
- Generating RSA Key Pairs
- Viewing Components of RSA Keys
- Encrypting RSA Keys
OpenSSL - Generating Self-Signed Certificates
- What is a certificate?
- Generating Self-Signed Certificates
- Viewing Components of Certificates
OpenSSL - Signing Certificates from Others
- Why Certificates Need to Be Signed by CAs?
- Generating a Certificate Signing Request for Your Own Public Key
- Viewing Components of Certificate Signing Request
- Signing a Certificate Signing Request
OpenSSL - Certification Path and Validation
- What Is a Certification Path?
- Certification Path Validation
- Certification Path Testing with OpenSSL
keytool - JDK Tool to Manage Certificates Using 'keystore'
- Certificates and Certificate Chains
- What is "keystore"?
- "keytool" - Key and Certificate Management Tool
- "keytool" Example - Generating Key Pairs and Self-Signed Certificates
- "keytool" Example - Exporting and Import Certificates
- "keytool" Example - Cloning Certificates with New Identities
Using Certificates with Web Browsers
- Why Using Certificates with Browser?
- Exporting Certificates Out of Internet Explorer (IE)
- Importing Certificates into IE
- View Certificates in FireFox
- Importing Certificates into FireFox
'OpenSSL' Signing CSR Generated by 'keytool'
- Using "OpenSSL" to Act as a CA (Certificate Authority)
- "OpenSSL" Generating CA's Private Key
- "OpenSSL" Self-signing CA's Public Key Certificate
- "keytool" Generating Maria's Private Key
- "keytool" Generating Maria's CSR (Certificate Sign Request)
- "OpenSSL" Signing Maria's CSR (Certificate Sign Request)
- "keytool" Managing Serial Numbers when Signing CSR
- "keytool" Importing CA's Certificate into Keystore Files
- "keytool" Importing Maria's Own Certificate
Migrating Keys from 'keytool' to 'OpenSSL'
- "keytool" Generating Private and Public Key Pair
- "keytool" Exporting PrivateKeyEntry
- "keytool" Printing Certificate Details
- "OpenSSL" Viewing "keytool" Generated Certificates
- DumpKey.java - Dumping Private Keys Out of "keystore"
- "OpenSSL" Converting Keys from Binary to PEM
- "OpenSSL" Viewing "keytool" Keys
Certificate Formats - X.509, DER and PEM
- X.509 Certificate Standard
- PEM (Privacy Enhanced Mail) Encoding
- DER (Distinguished Encoding Rules) Encoding
- "keytool" Exporting Certificates in DER and PEM
- "OpenSSL" Verifying "keytool" Certificates
- "OpenSSL" Generating Certificates in DER and PEM
- "keytool" Viewing "OpenSSL" Certificates
- "keytool" Importing "OpenSSL" Certificates
Key Formats PKCS#8 and PKCS#12 and Migration
- What is PKCS#8?
- What is PKCS#12?
- "OpenSSL" Private Key in Traditional Format
- "OpenSSL" Private Key in PKCS#8 Format
- "OpenSSL" Key and Certificate in PKCS#12 Format
- "keytool" Converting PKCS12 to JKS
- Summary - Migrating "OpenSSL" Keys to "keytool"
- Summary - Migrating "keytool" Keys to "OpenSSL"
References
Key Words: blowfish, CA, certificate, certification path, cipher, CSR, decryption, DER, DES, digest, encryption, Java, JCE, JDK, keytool, MD5, message, OpenSSL, PEM, PKCS#8, PKCS#12, private key, public key, RSA, secret key, self-signed certificate, SHA1, SSL, X.509
Cryptography Tutorials - Herong's Tutorial Notes
Version 4.00
Dr. Herong Yang
Copyright © 1998 - 2007 by Dr. Herong Yang. All rights reserved.
Table of Contents
About This Book
Terminology
- Cryptography Terminology
Basic Concepts
- Cryptography
- Function
- Encryption
Cipher - DES Algorithm
- Block Cipher
- DES (Data Encryption Standard) Cipher Algorithm
- DES Key Schedule (Round Keys Generation) Algorithm
- DES Decryption Algorithm
DES Algorithm - Illustrated with Java Programs
- DESSubkeysTest.java - DES Key Schedule Algorithm Illustration
- DESCipherTest.java - DES Cipher Algorithm Illustration
DES Algorithm - Java Implementation
- CipherDES.java - A Simple Java Implementation of DES
- Test Cases of DES Encryption and Decryption
DES Algorithm - Java JCE SUN Implementation
- DES Java Implementation by Sun
- Using DES Algorithm in JDK JCE Package
- Test Cases of DES Encryption and Decryption
- What Is PKCS5Padding?
- JceSunDesPaddingTest.java - JCE DES Padding Testing Program
DES Algorithm - Operation Modes and JCE SUN Implementation
- DES Encryption Operation Modes
- What is ECB (Electronic CodeBook) Operation Mode?
- What is CBC (Cipher Block Chaining) Operation Mode?
- What is CFB (Cipher FeedBack) Operation Mode?
- What is OFB (Output FeedBack) Operation Mode?
- Sun Java Implementation of DES Operation Modes
- JceSunDesOperationModeTest.java - JCE DES Operation Mode Testing Program
- Test Cases of DES Operation Modes
DES Algorithm - Stream Cipher Modes and JCE SUN Implementation
- DES in Stream Cipher Modes
- CFB (Cipher FeedBack) Operation Mode as a Stream Cipher
- OFB (Output FeedBack) Operation Mode as a Stream Cipher
- Sun Java Implementation of DES Operation Modes
- JceSunDesStreamCipherTest.java - JCE DES Stream Cipher Mode Testing Program
- Test Cases of DES Stream Cipher Modes
DES Algorithm - PHP Implementation in mcrypt
- mcrypt Library for PHP
- mcrypt Encryption Functions
- des_mcrypt_operation_mode_test.php - mcrypt Operation Mode Test PHP Script
- Block Padding in mcrypt
- Other PHP Implementations of DES Algorithm
JDK/JCE - Cipher for Encryption and Decryption
- The Cipher Class
- JceSecretCipher.java - Cipher with Secret Key
- JcePublicCipher.java - Cipher with Private and Public Key Pair
Cipher - Blowfish Algorithm
- Block Cipher
- Blowfish Cipher Algorithm
- Blowfish Key Schedule (Sub-Keys Generation) Algorithm
- BlowfishJ - Java Implementation by Markus Hahn
- Blowfish Decryption Algorithm
- 8366 Hex Digits of PI
Message Digest - MD5 Algorithm
- What is MD5?
- MD5 Algorithm Overview
- MD5 Implementation in Java
- MD5 Implementation in PHP
- MD5 Implementation in Perl
Message Digest - SHA1 Algorithm
- What is SHA1?
- SHA1 Algorithm Overview
- SHA1 Implementation in Java
- SHA1 Implementation in PHP
- SHA1 Implementation in Perl
OpenSSL - Installation on Windows
- What is OpenSSL?
- Installing OpenSSL on Windows
OpenSSL - Generating RSA Private and Public Keys
- What is RSA?
- Generating RSA Key Pairs
- Viewing Components of RSA Keys
- Encrypting RSA Keys
OpenSSL - Generating Self-Signed Certificates
- What is a certificate?
- Generating Self-Signed Certificates
- Viewing Components of Certificates
OpenSSL - Signing Certificates from Others
- Why Certificates Need to Be Signed by CAs?
- Generating a Certificate Signing Request for Your Own Public Key
- Viewing Components of Certificate Signing Request
- Signing a Certificate Signing Request
OpenSSL - Certification Path and Validation
- What Is a Certification Path?
- Certification Path Validation
- Certification Path Testing with OpenSSL
keytool - JDK Tool to Manage Certificates Using 'keystore'
- Certificates and Certificate Chains
- What is "keystore"?
- "keytool" - Key and Certificate Management Tool
- "keytool" Example - Generating Key Pairs and Self-Signed Certificates
- "keytool" Example - Exporting and Import Certificates
- "keytool" Example - Cloning Certificates with New Identities
Using Certificates with Web Browsers
- Why Using Certificates with Browser?
- Exporting Certificates Out of Internet Explorer (IE)
- Importing Certificates into IE
- View Certificates in FireFox
- Importing Certificates into FireFox
'OpenSSL' Signing CSR Generated by 'keytool'
- Using "OpenSSL" to Act as a CA (Certificate Authority)
- "OpenSSL" Generating CA's Private Key
- "OpenSSL" Self-signing CA's Public Key Certificate
- "keytool" Generating Maria's Private Key
- "keytool" Generating Maria's CSR (Certificate Sign Request)
- "OpenSSL" Signing Maria's CSR (Certificate Sign Request)
- "keytool" Managing Serial Numbers when Signing CSR
- "keytool" Importing CA's Certificate into Keystore Files
- "keytool" Importing Maria's Own Certificate
Migrating Keys from 'keytool' to 'OpenSSL'
- "keytool" Generating Private and Public Key Pair
- "keytool" Exporting PrivateKeyEntry
- "keytool" Printing Certificate Details
- "OpenSSL" Viewing "keytool" Generated Certificates
- DumpKey.java - Dumping Private Keys Out of "keystore"
- "OpenSSL" Converting Keys from Binary to PEM
- "OpenSSL" Viewing "keytool" Keys
Certificate Formats - X.509, DER and PEM
- X.509 Certificate Standard
- PEM (Privacy Enhanced Mail) Encoding
- DER (Distinguished Encoding Rules) Encoding
- "keytool" Exporting Certificates in DER and PEM
- "OpenSSL" Verifying "keytool" Certificates
- "OpenSSL" Generating Certificates in DER and PEM
- "keytool" Viewing "OpenSSL" Certificates
- "keytool" Importing "OpenSSL" Certificates
Key Formats PKCS#8 and PKCS#12 and Migration
- What is PKCS#8?
- What is PKCS#12?
- "OpenSSL" Private Key in Traditional Format
- "OpenSSL" Private Key in PKCS#8 Format
- "OpenSSL" Key and Certificate in PKCS#12 Format
- "keytool" Converting PKCS12 to JKS
- Summary - Migrating "OpenSSL" Keys to "keytool"
- Summary - Migrating "keytool" Keys to "OpenSSL"
References
Key Words: blowfish, CA, certificate, certification path, cipher, CSR, decryption, DER, DES, digest, encryption, Java, JCE, JDK, keytool, MD5, message, OpenSSL, PEM, PKCS#8, PKCS#12, private key, public key, RSA, secret key, self-signed certificate, SHA1, SSL, X.509