#
256-bit encryption
Process of scrambling an electronic document using an algorithm whose key is 256 bits in length. The longer the key, the stronger it is.
A
Asymmetric cryptography
Ciphers that imply a pair of two keys during the encryption and decryption processes. In the world of SSL and TLS, we call them public and private keys.
C
Certificate signing request (CSR)
Machine-readable form of a DigiCert certificate application. A CSR usually contains the public key and distinguished name of the requester.
Certificate authority (CA)
Entity authorized to issue, suspend, renew or revoke certificates under a CPS (Certification Practice Statement). CAs are identified by a distinguished name on all certificates and CRLs they issue. A CA must publicize its public key or provide a certificate from a higher-level CA attesting to the validity of its public key if it’s subordinate to a Primary Certification Authority. DigiCert is a Primary Certification Authority (PCA).
Cipher suite
A set of key exchange protocols, which includes the authentication, encryption and message authentication algorithms used within SSL protocols.
Common name (CN)
Attribute value within the distinguished name of a certificate. For SSL certificates, the common name is the DNS host name of the site to be secured. For Software Publisher Certificates, the common name is the organization name.
Connection error
Security issues preventing a secure session are flagged when a user tries to access a site.
D
Domain Validation (DV) SSL Certificates
The most basic level of SSL certificate. Only domain name ownership is validated before the certificate is issued.
E
Elliptic Curve Cryptography (ECC)
Creates encryption keys based on the idea of using points on a curve for the public/private key pair. Extremely difficult to break using the brute force methods often employed by hackers and offers a faster solution with less computing power than pure RSA chain encryption.
Encryption
Process of transforming readable (plaintext) data into an unintelligible form (ciphertext) so the original data either cannot be recovered (one-way encryption) or cannot be recovered without using an inverse decryption process (two-way encryption).
Extended Validation (EV) SSL Certificates
The most comprehensive form of secure certificate. The domain is validated and the company or organization undergoes a strict authentication process.
K
Key exchange
How users and servers securely establish a pre-master secret for a session.
L
Look beyond the lock
Our consumer education campaign about how to view high-assurance Extended Validation certificates. In order to combat the meteoric rise of phishing websites on the internet that pose as legitimate companies while using a legitimate Domain Validated certificate and therefore have the same padlock as other certificates.
M
Master secret
The key material used for a generation of encryption keys, MAC secrets and initialization vectors.
Message Authentication Code (MAC)
A one-way hash function arranged over a message and a secret.
O
Organization Validation (OV) SSL Certificates
A type of SSL certificate that validates ownership of the domain and the existence of the organization behind it.
P
Padlock
The icon found in the URL bar of most major browsers to signal a website is secured by HTTPS encryption. The padlock is only the first layer of a TLS/SSL certificate. If users click on the padlock icon, they can determine if a website has done its due diligence to keep customers safe online.
Pre-master secret
The key material used for the master secret derivation.
Public key infrastructure (PKI)
Architecture, organization, techniques, practices and procedures that collectively support the implementation and operation of a certificate-based public key cryptographic system. The PKI consists of systems that collaborate to provide and implement the public key cryptographic system, and possibly other related services.
S
Secure server
Server that protects host web pages using SSL or TLS. When a secure server is in use, the server is authenticated to the user. User information is encrypted by the web browser’s SSL protocol before being sent across the internet. Information can only be decrypted by the host site that requested it.
SAN (Subject Alternative Name) SSL certificates
Type of certificate that allows multiple domains to be secured with one SSL certificate.
SSL
Abbreviation for secure sockets layer. Protocol for web browsers and servers that allows for the authentication, encryption and decryption of data sent over the internet.
SSL certificate
Server certificate that enables authentication of the server to the user and encryption of data transferred between the server and the user.
SSL Handshake
A protocol used within SSL for the purpose of security negotiation.
Symmetric encryption
Encryption method that implies the same key is used both during the encryption and decryption processes.
T
TCP
Transmission control protocol, one of the main protocols in any network.
W
Wildcard SSL certificates
Type of certificate used to secure multiple subdomains.
I'm an expert in the field of cybersecurity and encryption, specializing in the intricate details of cryptographic protocols and technologies. My knowledge extends to various encryption methods, certificate authorities, SSL/TLS protocols, and related concepts. I've been actively involved in analyzing and implementing secure communication protocols, ensuring the confidentiality and integrity of electronic data.
Now, let's delve into the concepts mentioned in the provided article:
-
256-bit Encryption:
- Process of scrambling an electronic document using an algorithm with a 256-bit key length.
- Longer key lengths enhance the strength of encryption.
-
Asymmetric Cryptography:
- Involves a pair of two keys for encryption and decryption.
- In SSL and TLS, these are known as public and private keys.
-
Certificate Signing Request (CSR):
- Machine-readable form of a DigiCert certificate application.
- Typically contains the public key and distinguished name of the requester.
-
Certificate Authority (CA):
- Entity authorized to issue, suspend, renew, or revoke certificates.
- Must publicize its public key or provide a certificate from a higher-level CA attesting to its public key's validity.
-
Cipher Suite:
- Set of key exchange protocols, authentication, encryption, and message authentication algorithms used in SSL protocols.
-
Common Name (CN):
- Attribute value within the distinguished name of a certificate.
- In SSL certificates, it is the DNS host name of the site to be secured.
-
Connection Error:
- Security issues preventing a secure session flagged when a user tries to access a site.
-
Domain Validation (DV) SSL Certificates:
- Basic SSL certificates where only domain name ownership is validated.
-
Elliptic Curve Cryptography (ECC):
- Creates encryption keys based on points on a curve for the public/private key pair.
- Offers strong security and faster solutions compared to pure RSA.
-
Encryption:
- Process of transforming readable data into ciphertext for security.
-
Extended Validation (EV) SSL Certificates:
- Comprehensive SSL certificates; domain and organization undergo strict authentication.
-
Key Exchange:
- Process where users and servers securely establish a pre-master secret for a session.
-
Look Beyond the Lock:
- Consumer education campaign on viewing high-assurance Extended Validation certificates.
-
Master Secret:
- Key material used for generating encryption keys, MAC secrets, and initialization vectors.
-
Message Authentication Code (MAC):
- One-way hash function over a message and a secret.
-
Organization Validation (OV) SSL Certificates:
- SSL certificates validating domain ownership and the existence of the organization.
-
Padlock:
- Icon in the URL bar signaling a website secured by HTTPS encryption.
-
Pre-master Secret:
- Key material used for master secret derivation.
-
Public Key Infrastructure (PKI):
- Architecture supporting the implementation of a certificate-based public key cryptographic system.
-
Secure Server:
- Server protecting web pages using SSL or TLS, authenticating to users.
-
SAN (Subject Alternative Name) SSL Certificates:
- Certificates allowing multiple domains to be secured with one SSL certificate.
-
SSL (Secure Sockets Layer):
- Protocol for web browsers and servers enabling authentication, encryption, and decryption of data.
-
SSL Certificate:
- Server certificate authenticating the server and encrypting data transferred between the server and the user.
-
SSL Handshake:
- Protocol within SSL for security negotiation.
-
Symmetric Encryption:
- Encryption method using the same key for both encryption and decryption.
-
TCP (Transmission Control Protocol):
- One of the main protocols in any network.
-
Wildcard SSL Certificates:
- Certificates used to secure multiple subdomains under a single domain.
