Cryptography & Security: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
Jochen (Diskussion | Beiträge) |
Jochen (Diskussion | Beiträge) |
||
| Zeile 3: | Zeile 3: | ||
== OAuth2 == | == OAuth2 == | ||
* [https://oauth.net/2/ Homepage] | * [https://oauth.net/2/ Homepage] | ||
* [https://tools.ietf.org/html/rfc6749 RFC 6749: The OAuth 2.0 Authorization Framework] | * [https://tools.ietf.org/html/rfc6749 RFC 6749: The OAuth 2.0 Authorization Framework] | ||
| Zeile 10: | Zeile 11: | ||
== OpenID Connect == | == OpenID Connect == | ||
* [http://openid.net/connect/ Homepage] | * [http://openid.net/connect/ Homepage] | ||
* [http://openid.net/specs/openid-connect-core-1_0.html OpenID Connect Core 1.0 incorporating errata set 1] | * [http://openid.net/specs/openid-connect-core-1_0.html OpenID Connect Core 1.0 incorporating errata set 1] | ||
| Zeile 19: | Zeile 21: | ||
* [http://openid.net/specs/openid-connect-frontchannel-1_0.html OpenID Connect Front-Channel Logout 1.0 - draft 01] | * [http://openid.net/specs/openid-connect-frontchannel-1_0.html OpenID Connect Front-Channel Logout 1.0 - draft 01] | ||
* [http://openid.net/specs/openid-connect-backchannel-1_0.html OpenID Connect Back-Channel Logout 1.0 - draft 03] | * [http://openid.net/specs/openid-connect-backchannel-1_0.html OpenID Connect Back-Channel Logout 1.0 - draft 03] | ||
== JSON Web Token et. al. == | == JSON Web Token et. al. == | ||
* [https://tools.ietf.org/html/rfc7515 RFC 7515: JSON Web Signature (JWS)] | * [https://tools.ietf.org/html/rfc7515 RFC 7515: JSON Web Signature (JWS)] | ||
* [https://tools.ietf.org/html/rfc7516 RFC 7516: JSON Web Encryption (JWE)] | * [https://tools.ietf.org/html/rfc7516 RFC 7516: JSON Web Encryption (JWE)] | ||
| Zeile 26: | Zeile 30: | ||
* [https://tools.ietf.org/html/rfc7518 RFC 7518: JSON Web Algorithms (JWA)] | * [https://tools.ietf.org/html/rfc7518 RFC 7518: JSON Web Algorithms (JWA)] | ||
* [https://tools.ietf.org/html/rfc7519 RFC 7519: JSON Web Token (JWT)] | * [https://tools.ietf.org/html/rfc7519 RFC 7519: JSON Web Token (JWT)] | ||
== Einweg-Hashfunktionen == | == Einweg-Hashfunktionen == | ||
| Zeile 37: | Zeile 42: | ||
== Protokolle zur Authentifizierung == | == Protokolle zur Authentifizierung == | ||
* [http://davenport.sourceforge.net/ntlm.html The NTLM Authentication Protocol] [[Media:The NTLM Authentication Protocol and Security Support Provider.pdf|(PDF)]] | * [http://davenport.sourceforge.net/ntlm.html The NTLM Authentication Protocol] [[Media:The NTLM Authentication Protocol and Security Support Provider.pdf|(PDF)]] | ||
* [https://tools.ietf.org/html/rfc4120 RFC 4120: The Kerberos Network Authentication Service (V5)] | * [https://tools.ietf.org/html/rfc4120 RFC 4120: The Kerberos Network Authentication Service (V5)] | ||
| Zeile 43: | Zeile 49: | ||
== Symmetrische Verschlüsselung == | == Symmetrische Verschlüsselung == | ||
* [http://csrc.nist.gov/publications/fips/fips46-3/fips46-3.pdf FIPS PUB 46-3: Data Encryption Standard (DES), National Institute of Standards and Technology, October 25, 1999] | * [http://csrc.nist.gov/publications/fips/fips46-3/fips46-3.pdf FIPS PUB 46-3: Data Encryption Standard (DES), National Institute of Standards and Technology, October 25, 1999] | ||
* [http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf FIPS PUB 197: Advanced Encryption Standard (AES), National Institute of Standards and Technology, November 26, 2001] | * [http://csrc.nist.gov/publications/fips/fips197/fips-197.pdf FIPS PUB 197: Advanced Encryption Standard (AES), National Institute of Standards and Technology, November 26, 2001] | ||
| Zeile 48: | Zeile 55: | ||
== Public-Key Cryptography Standards (PKCS) - RSA Laboratories == | == Public-Key Cryptography Standards (PKCS) - RSA Laboratories == | ||
* [https://tools.ietf.org/html/rfc3447 PKCS #1: RSA Cryptography Specifications Version 2.1 (RFC 2313)] | * [https://tools.ietf.org/html/rfc3447 PKCS #1: RSA Cryptography Specifications Version 2.1 (RFC 2313)] | ||
* [https://tools.ietf.org/html/draft-moriarty-pkcs1-03 PKCS #1: RSA Cryptography Specifications Version 2.2 (RFC draft-moriarty-pkcs1-03)] | * [https://tools.ietf.org/html/draft-moriarty-pkcs1-03 PKCS #1: RSA Cryptography Specifications Version 2.2 (RFC draft-moriarty-pkcs1-03)] | ||
| Zeile 64: | Zeile 72: | ||
== Generic Security Service API (GSS-API) == | == Generic Security Service API (GSS-API) == | ||
* [https://tools.ietf.org/html/rfc2743 RFC 2743: Generic Security Service Application Program Interface Version 2, Update 1] | * [https://tools.ietf.org/html/rfc2743 RFC 2743: Generic Security Service Application Program Interface Version 2, Update 1] | ||
* [https://tools.ietf.org/html/rfc5554 RFC 5554: Clarifications and Extensions to the Generic Security Service Application Program Interface (GSS-API) for the Use of Channel Bindings] | * [https://tools.ietf.org/html/rfc5554 RFC 5554: Clarifications and Extensions to the Generic Security Service Application Program Interface (GSS-API) for the Use of Channel Bindings] | ||
Version vom 3. Oktober 2016, 15:24 Uhr
OAuth2
- Homepage
- RFC 6749: The OAuth 2.0 Authorization Framework
- RFC 6750: The OAuth 2.0 Authorization Framework: Bearer Token Usage
- RFC 6819: OAuth 2.0 Threat Model and Security Considerations
OpenID Connect
- Homepage
- OpenID Connect Core 1.0 incorporating errata set 1
- OpenID Connect Discovery 1.0 incorporating errata set 1
- OpenID Connect Dynamic Client Registration 1.0 incorporating errata set 1
- OAuth 2.0 Multiple Response Type Encoding Practices
- OAuth 2.0 Form Post Response Mode
- OpenID Connect Session Management 1.0 - draft 27
- OpenID Connect Front-Channel Logout 1.0 - draft 01
- OpenID Connect Back-Channel Logout 1.0 - draft 03
JSON Web Token et. al.
- RFC 7515: JSON Web Signature (JWS)
- RFC 7516: JSON Web Encryption (JWE)
- RFC 7517: JSON Web Key (JWK)
- RFC 7518: JSON Web Algorithms (JWA)
- RFC 7519: JSON Web Token (JWT)
Einweg-Hashfunktionen
- RFC 1321: The MD5 Message-Digest Algorithm
- RFC 2104: HMAC: Keyed-Hashing for Message Authentication
- RFC 6151: Updated Security Considerations for the MD5 Message-Digest and the HMAC-MD5 Algorithms
- RFC 6234: US Secure Hash Algorithms (SHA and SHA-based HMAC and HKDF)
- FIPS PUB 180-4: Secure Hash Standard (SHS)
Protokolle zur Authentifizierung
- The NTLM Authentication Protocol (PDF)
- RFC 4120: The Kerberos Network Authentication Service (V5)
- RFC 4120: The Kerberos Version 5 Generic Security Service Application Program Interface (GSS-API) Mechanism: Version 2
Symmetrische Verschlüsselung
- FIPS PUB 46-3: Data Encryption Standard (DES), National Institute of Standards and Technology, October 25, 1999
- FIPS PUB 197: Advanced Encryption Standard (AES), National Institute of Standards and Technology, November 26, 2001
Public-Key Cryptography Standards (PKCS) - RSA Laboratories
- PKCS #1: RSA Cryptography Specifications Version 2.1 (RFC 2313)
- PKCS #1: RSA Cryptography Specifications Version 2.2 (RFC draft-moriarty-pkcs1-03)
- PKCS #3: Diffie-Hellman Key Agreement Standard, Version 1.4
- PKCS #5: Password-Based Cryptography Standard, Version 2.0 (RFC 2898)
- PKCS #5: Password-Based Cryptography Standard, Version 2.1 (RFC draft-moriarty-pkcs5-v2dot1-04)
- PKCS #6: Extended-Certificate Syntax Standard, Version 1.5
- PKCS #7: Cryptographic Message Syntax Standard, Version 1.5 (2315)
- PKCS #8: Private-Key Information Syntax Standard, Version 1.2 (RFC 5208)
- PKCS #8: EncryptedPrivateKeyInfo Media Type (RFC draft-seantek-pkcs8-encrypted-01)
- PKCS #9: Selected Object Classes and Attribute Types Version 2.0 (RFC 2985)
- PKCS #10: Certification Request Syntax Specification Version 1.7 (RFC 2986)
- PKCS #11: URI Scheme (RFC 7512)
- PKCS #12: Personal Information Exchange Syntax Version 1.1 (RFC 7292)
Generic Security Service API (GSS-API)
- RFC 2743: Generic Security Service Application Program Interface Version 2, Update 1
- RFC 5554: Clarifications and Extensions to the Generic Security Service Application Program Interface (GSS-API) for the Use of Channel Bindings
- RFC 2479: Independent Data Unit Protection Generic Security Service Application Program Interface (IDUP-GSS-API)
- RFC 2744: Generic Security Service API Version 2 : C-bindings
- RFC 5653: Generic Security Service API Version 2: Java Bindings Update