Non-repudiation is the ability to prevent a identified individual from repudiating a specific action or communication associated with that individual.
5
votes
2answers
94 views
Is “non-repudiation” automatically proven, given the other three tenets of info security?
Just to say it, the four tenets are:
Confidentiality - The message the recipient gets can be proven not to have been read by anyone else since it was encoded.
Integrity - The message the recipient ...
5
votes
2answers
669 views
What security standards and regulations are in place for bank ATM?
Are there any international or US mandated standards and regulations that apply to communications between automatic teller machines and bank's central office? Are banks or ATM operators subjected to ...
1
vote
1answer
71 views
Ciphertext for email vs Ciphertext for database
Let's say Bob wants to send a message to Alice. This communication requires to achieve confidentiality, integrity, proof of origin, non-repudiation. Therefore we can use this cipher-text:
ciphertext ...
4
votes
2answers
739 views
When using symmetric key encryption, do we need to sign?
Say we're using a shared key between two parties, that has been distributed using public key encryption, is it still necessary to sign any data that's encrypted using the shared key? Or is it enough ...
6
votes
3answers
3k views
What is the difference between authenticity and non-repudiation
I'm new to infosec and doing some reading. Not surprisingly one starting point was wikipedia. In this article, authenticity and non-repudiation are listed as 2 separate 'Basic concepts'. My ...
5
votes
4answers
464 views
Non-repudiation in Exchange/Outlook without Digital Signatures
Scenario: Acme Corp. needs to collect evidence to support their side of a case in court. Part of this evidence may include e-mail messages. Certain employees who do not have administrative access ...
