Domain 1.4

Public Key Infrastructure (PKI)

Manages digital certificates and cryptographic keys.

Public key

encryption key

Private key

decryption key

Key escrow

Securely storing encryption keys for recovery

Symmetric encryption

same key used to encrypt and decrypt

Asymmetric encryption

Two-key encryption (public + private)

Key exchange

Securely sharing encryption keys between parties.

Full-disk encryption

Encrypts entire drive

Partition encryption

Encrypts a specific disk partition.

File encryption

Encrypting individual files to protect their contents.

Volume encryption

Encrypts an entire logical volume.

Database encryption

Protecting database data using encryption.

Record encryption

Encrypting individual records in a database.

Trusted Platform Module (TPM)

Hardware chip that securely stores crypto keys.

Hardware Security Module (HSM)

A hardware device that gens, manages, stores crypto keys for multiple systems.

Key management system

creating, storing, managing encryption keys

Secure enclave

Isolated processor area that protects sensitive data.

Steganography

Hiding data inside other data

Tokenization

Replacing data with tokens

Data masking

hides sensitive data while maintaining format

Hashing

converts data into fixed value

Salting

adds random data to hash to prevent cracking

Key stretching

Making passwords harder to crack by repeated hashing.

Digital signature

Proves sender and data integrity

Blockchain

record of transactions.

Open public ledger

Public record of transactions

Certificate authority

Trusted certificate issuer

Certificate revocation list

Revoked certificates list

Online Certificate Status Protocol

Checks certificate validity

Self-signed certificate

Signed by itself

Third-party certificate

Signed by trusted CA

Root of trust

Trusted starting point

Certificate Signing Request

Request for a certificate

Wildcard certificate

Covers many subdomains