Linked Questions

57 votes
5 answers
79k views

What is the difference between authenticity and non-repudiation?

I'm new to infosec and doing some reading. Not surprisingly one starting point was wikipedia. In this article, authenticity and non-repudiation are listed as 2 separate 'Basic concepts'. My ...
Max's user avatar
  • 672
15 votes
6 answers
4k views

Why not RSA-encrypt the entire document?

I have recently learned of a way for person B to verify that a document sent from person A is indeed from person A. Person A gives Person B his public RSA key. This must be done reliably. Person A ...
David Faux's user avatar
4 votes
2 answers
2k views

Online banking proof of transaction for vertification in court

So, when i do an online payment transaction i "sign" my transaction with my digipass using some sort of a MAC (HMAC) with a shared key and some information that is unique for this transaction. But ...
Anonymous's user avatar
  • 333
2 votes
1 answer
3k views

Reason for using Asymmetric encryption along with SHA256

I got a document with integration with another application. They mentioned I need to hash and then encrypt data with my private key before sending it over HTTPS. By doing this, they are making sure ...
user avatar
0 votes
1 answer
2k views

Difference between interception, spoofing, falsification and repudiation [closed]

In very layman's terms AFAIK security threats are classified into four broad categories namely Interception or Snooping or Sniffing Spoofing Falsification and Repudiation I could get few related ...
RBT's user avatar
  • 109
0 votes
1 answer
1k views

If non-repudiation is impossible why do digital signature exist

Since non-repudiation is impossible to achieve purely by software why do digital signature exists? Let me clarify a bit (this part is from eschaefe book pg 64): 1. When B connects to website A he ...
daniels_pa's user avatar
1 vote
2 answers
415 views

Confidentiality and integrity

Users permissions and privilege should be considered as a part of confidentiality (specifically access control) or integrity? And I'm also wondering if we can categorize Accountability, Authenticity ...
user3011084's user avatar
2 votes
3 answers
305 views

How to prove a user is actually the perpetrator of certain actions?

TL;DR : What is the best and most "by the book" way to accheive non repudiation of origin. I have a system in which users can perform actions (register/unregister/...) Those actions are signed by my ...
Guillaume Lhermitte's user avatar
2 votes
1 answer
283 views

2fa attestation object for non-repudiation

I am reading on digital signatures: A valid digital signature gives a recipient reason to believe that the message was created by a known sender (authentication), that the sender cannot deny ...
thalisk's user avatar
  • 123
2 votes
1 answer
427 views

How to implement a digital signature for 21 CFR Part 11 for non repudiation

I would like to know what is the best way to implement a digital signature to achive Non-Repudation to acomplish 21-CFR-Part11-SubpartC-11.100.part-c. Anybody has implemented this for 21 CFR 11? Non ...
Ekaitz Hernandez Troyas's user avatar
1 vote
1 answer
407 views

Understanding Digital Signature

I have just learned Digital Signature and am trying to ensure that I have got my understanding of Digital Signature on the correct track. Assume Alice wants to send a message (M) to Bob where the ...
Computernerd's user avatar
  • 2,431
0 votes
1 answer
193 views

symetric encryption and signature [closed]

asymetric key is normally used for signature for non repudiation. But what if one uses EMV CAP in TDS mode as described here http://en.wikipedia.org/wiki/Chip_Authentication_Program ? Is non ...
user310291's user avatar
  • 1,403