Security

Revision as of 21:14, 29 April 2014

Formats specific to the storage and transmission of security information.

See also:

• Encryption
• E-Mail, newsgroups, and forums: Secure messaging

Digital Certificates

• ASCII Armor (.arm; old for base64)
• Canonical Encoding Rules (.cer)
• Certificate Revocation List (.crl)
• Certificate Signing Request
• Certificate Trust List (.stl)
• DER (Distinguished Encoding Rules)
• DER encoded certificate (.der, .crt)
• DER encoded RSA private key
• Microsoft Serialized Certificate Store (.sst)
• PEM
• PEM encoded certificate (.pem, .crt)
• PEM encoded RSA private key (.key)
• PFX (original format)
• PKCS7 (PKCS #7, Cryptographic Message Syntax Standard)
• PKCS7 certificate (.p7b, .p7c, .spc)
• PKCS10 (PKCS #10 Certificate Signing Request, .p10, .csr)
• PKCS12 (PKCS #12, PFX, Personal Information Exchange, .p12, .pfx)
• PVK
• RSA private key
• SPKAC
• X.509 certificate

Electronic signatures

• HMAC (Hash-based message authentication code)

App provisioning and DRM

• Mobile Provision file (.mobileprovision; used for installing iOS apps)

Authentication

• SAML (Security Assertion Markup Language)

System security policies

• Sudoers (module and file determining user privileges)

References

• Various SSL/TLS Certificate File Types/Extensions (MSDN article)
• Hashcat: password cracking program
• Can someone be targeted using the Adobe breach?
• xkcd comic about Adobe password breach situation
• Improving security in Firefox
• 2014 Super Bowl security (picture)
• Senate cybersecurity report finds agencies often fail to take basic preventive measures
• What happens with Digital Rights Management in the real world?
• Xbox password flaw exposed by five-year-old boy (And Microsoft thanked the kid instead of getting him arrested, imagine that.)
• Be Still My Breaking Heart
• When two-factor authentication is not enough
• origins of libressl