www.phillipgriffin.com

CMS Basics

This course provides an introduction to Cryptographic Message Syntax (CMS), and describes the history, application, message types, and notation used to provide data integrity, origin authentication, and privacy services using digital signatures, message digests (hashes), and symmetric and asymmetric encryption of arbitrary content. Attendees should have at least a basic understanding of Abstract Syntax Notation (ASN.1), Public Key cryptography, and key establishment mechanisms.

• Course overview
• What is CMS?
• History
• RSA Public Key Cryptography Standards
• Privacy Enhanced Mail (PEM)
• PKCS #7 CMS
• Secure Electronic Transaction (SET)
• IETF RFC's
• ANSI Standards: X9.73 CMS and X9.96 XML CMS
• ISO 22895 Cryptographic syntax schema
• Applications
• Secure electronic email (S/MIME)
• Time stamp protocols
• Biometrics
• PKI Certificate distribution
• Content types
• Nested content
• Recursive processing
• Encapsulted content ("octet hole")
• Data
• DigestedData
• SignedData
• Digest algorithms
• Saddlebags (Certificates, CRLs)
• Detached signed content
• No signed content
• Multiple signers
• Signer identification
• Authenticated attributes
• MessageDigest
• ContentType
• Unauthenticated attributes
• EncryptedData
• NamedKeyEncryptedData
• EnvelopedData
• Key transport
• Key agreement
• Previously established key
• Password-based encryption
• Other Key Management schemes
• AuthenticatedData
• Summary
• Useful links
• Questions