public key infrastructure

public key infrastructure

policies, procedures, hardware, software, people responsible for creating, distribute, managing, storing, revoking digital certificates

symmetric encryption

a single, shared key

encrypt with the key

decrypt with the same key

can you bind public keys to people or devices

yes

what happens in a symmetric encryption key is compromised

then you have to get another key

what are the drawbacks of symmetric encryption

doesn’t scale very well and is challenging to distribute

what are the advantages of symmetric encryption

very fast to use and less overhead than asymmetric encryption

can symmetric encryption be combined with asymmetric encryption

yes

asymmetric encryption

public key cryptography

two or more mathematically related keys

what are the types of keys in asymmetric encryption

private key and public key that anyone can see and give away

private key is the only key that can do what with the data is encrypted with the public key

decrypt

how are the keys made

build both the public and private key at the same time

with lots of randomization

large prime numbers

lots of math

key escrow

someone else holds your decryption keys and this means your private keys are are in the hands of a 3rd-party

can the keys escrow be within your organization

yes

can key escrow be a legit business arrangement

yes

a business might need access to employee information

gov agencies may need to decrypt partner data