Short Paper Assignment
Description: The scenario description and requirements for Short Paper #2:
Prepare a short research paper of approximately 900 to 1000 words, double-spaced, exclusive of cover, title page (optional), table of contents (optional), endnotes and bibliography. Your paper must use APA formatting with the exception that tables and figures can be inserted at the appropriate location rather than added at the end. Submit the paper in your assignment folder as a Word attachment.
Ann changes banks following her troubles with UBT. At her new bank, First Security Trust (FST), RSA is used as the cryptographic system. Ann creates a key pair and supplies to Felicity, a manager of FST with her public key {eA, nA}, securing her private key {dA, nA} on a thumb drive which she keeps locked in a wall safe at her home. In turn, Felicity, who is designated to handle Ann's business, gave Ann access to a key server maintained by FST so that she can readily obtain Felicity's current public key {eF, nF} whenever she needs to communicate securely with Felicity.
Things are fine for several months until Ann sends Felicity a message m asking about current interest rates on Certificates of Deposit issued by FST. As shown below, she enciphers the message first and then signs it
C = (meF mod nF )dA mod nA
Where C is the encrypted message and m is the plaintext message.
A few days later, Ann received a statement that shows a debit of $1,500,000 from her account. On inquiring, she was told that Felicity transferred the money out of Ann's account into an account of her own in a bank on the Caribbean island of Nevis, where she moved. When reached via long distance in Nevis, Felicity produced a message 'g' from Ann saying:
"Thanks for your excellent service, Felicity. Please transfer $1,500,000 from my account to yours as a token of my esteem and appreciation. Signed, Ann."
Ann files suit against Felicity, FST and the government of the Nevis, claiming that the message was a forgery sent by Felicity herself, asking for triple damages for pain and suffering. Felicity has responded by claiming that all procedures were followed properly and that Ann is filing a nuisance suit.
You have been employed by FST as a cryptographic expert to assist in the investigation of this matter and help them decide what to do with Ann issue. You obtain Felicity's private key from the UST server, and the cipher text C, and calculate
g= (CeAmodnA)dFmodnF
Where g is the plain text message which was obtained the cipher text C, dF is Felicity's Private key Your report to the FST Board of Directors should address the following issues:
From the facts as presented what can be determined about Ann's intentions to make Felicity a gift of $1,500,000? How did the fact help you in forming your conclusion?
What is the significance of Nevis Island? Did the significance sway your decision? If yes why? If no why?
What is the significance of Ann's message to Felicity asking for interest rates?
Assuming FST wishes to continue using RSA as its cryptographic system, what FST and Ann could have done to protect against this controversy arising?
How to proceed in the litigation
Your report should clearly address these issues including the recommendation for Ann's suit, RSA with sufficient detail and background to allow the Board of Directors who are cryptographically challenged to understand the issues involved. It should give direction to formulate plans for how to approach the immediate legal issue with Ann, and to continue business in the future, assuming that they want to continue using only RSA. Assume that the directors do not know what RSA is and how it works.