Introduction The area of Cyber security is rapidly evolving, with important research being conducted at all levels. The current and potential damage to societies, businesses, and individuals is a topic of growing importance to Governments across the globe. The primary aim of this assignment is that analyse and design a solution to a given problem. Problem Outline Glyndwr Video Ltd, an online video programme seller recently decided to improve the accountability and security of its business services.
To achieve this, the company requires each employee to have a pair of public and secret RSA keys, and to digitally sign any sale agreement with his/her secret RSA key. In case of a dispute about the sale agreement, the company can easily identify the responsible employee and take appropriate action accordingly. The company has many PCs connected to a network. All PCs run the same software and are connected to a central server via the network. Each employee can use any one of the PCs, However the employee does not have a smart card or any secure way of carrying his/her secret key fro PC to PC. Instead each employee stores the secret key on the server. And will use a password to request the server to transfer the secret key to his/her PC. Details You are required to perform the following tasks (make any necessary assumptions) and document all results obtained from each of the tasks. 1. Design a protocol to allow the server to securely store the secret RSA key of each employee without being able to see the key. 2. Propose a protocol for a employee to securely download his/her key from the server. Note that this protocol must ensure that the server transfers a secret key to an employee only when the server is convinced that the employee is the owner of the secret key. Analyse the security of the secret key. 3. If for example a customer wants to secure his/her communications with Glyndwr Video, but the customer can only use a DES crypto system and does not have a shared DES key with Glyndwr Video. Devise a protocol for the customer to securely send a message to Glyndwr Video without any help from a third party. Analyse the security of this protocol