Asymmetric encryption of the symmetric encryption

Similar Questions

• calculate the symmetrical components of voltage and current

  Hi all. I work on the calculation of symmetrical components of voltage and current in Labview. I have included the relationship between the symmetrical components and sequence as photo 1 voltage. I'm going to use this calculation for several times, so I wonder if anyone has some ideas far better bc I wired just so much together to realize the expression. It seems aweful. Any suggestion? as built-in function to achieve this function? Thank you

  Let's take a look on your form (you don't say what is complex, etc, so modify as needed)

  

  For example, here is how you create the matrix A to an alpha given.

  

  Similarly, you can create A ^(-1) matrix (your definition of A and A ^(-1) seem incompatible, otherwise you could just pick matrix inverse of A). After that, you can multiply with you V123 vector using AxB.

• Encrypted voice over RTMFP

  Hello

  I'm the voice messanger encrypted coding. I heard, that its flow in NetStream is encrypted by the symmetric key algorithm. Is this true? If this is the case, where it is generated? Is the exchange of keys between peers based on smth like SSL (secure public key algorithm Protocol)? I want to make sure that no one can access this symmetric key. I would appreciate detailed information about encryption of transmission (graphics, technical references) because I am preparing studies on this subject. Thanks in advance for your help.

  Here is the information that we / i have disclosed in the past. I'm not able at the moment to share more.

  all packets are encrypted with AES-128-CBC.

  AES encryption keys are derived using Diffie-Hellman with a main module of 1024-bit (RFC 2409 MODP Group 2) end-to-end.

  all certificates of client Flash RTMFP include their public key DH used in the agreement of key-to-end.  the "peer ID" (NetConnection.nearID) is the SHA-256 of the certificate hash.  private/public Diffie-Hellman key is chosen at random for each new NetConnection using cryptographic Pseudo-aleatoire number source of the platform (for example/dev/urandom).

  This construction makes customer Flash ID approved tamperproof.  only one NetConnection in a client Flash operation can normally never have an identifier given by the peers.  It is only possible to have a network successful connection between two peers of customer if these peers have the private keys associated with their public keys.  an attacker masquerading as other peer can copy the certificate but not the private key, so the network connection will cannot succeed (since the attacker can not calculate the shared secret Diffie-Hellman that goes with the connection between the peer two IDs and therefore cannot calculate session AES keys, waiting for the other end).

  the nearNonce and the farNonce are also derived from the Diffie-Hellman shared secret and is known only for the two endpoints.  they are secret and impossible to forge.  they can be used as cryptographic challenges in the handshakes of application layer.

• Symmetrical and asymmetrical forms

  Dear Guru,
  
  What are the differences between symmetric and asymmetric forms?
  Thanks in advance...
  
  Published by: apprentice hyperion on December 11, 2010 10:45

  Asymmetric forms:-http://download.oracle.com/docs/cd/E17236_01/epm.1112/hp_admin/ch06s04s05.html
  the symmetrical forms are the opposite meaning that they have the same sets of members through the dimensions, basically symmetrical.
  Also do a search for symmetrical and asymmetrical on the web if you don't understand the meaning.

  See you soon

  John
  http://John-Goodwin.blogspot.com/

• Need for visibility on the IPsec protocol: aggressive Mode

  Hello

  I have a few doubts about VPN. I already went through a large number of documents. Everybody says something I don't agree with. So please don't view this kind of material in your answer.

  Aggressive mode: what I know, there are 3 Exchange for aggressive mode. Initiator in the first message sends the ID parameters, DH, HIS (IP address, domain name FULL). Then the answering machine (2nd MSG) reacts with the SA settings, DH, ID, HASH_R, then the initiator (3rd MSG) responds with HASH_I and PHASE 1 is established here.

  As the initiator and the responder IDs are sent in clear text, so we say that aggressive mode is not course.

  DH is used to exchange keys between peers. DH, negotiates and then generate a SECRET_KEY which in turn, is used to encrypt the symmetric key. We have SA parameters for encryption, hash, authentication.

  Here are my questions:

  (a) all of ITS parameters, IDs, DH traded first and second messages. The third message from the initiator is to send to HASH_I. Now, I don't see at all any use of DH in this mode, no encryption (payload ISAKAMP is not encrypted).  A single phase 1 aims to build a secure layer of management so that the PHASE connection 2 (data connection) may establish under a secure layer (PHASE 1). Now, I see that in aggressive mode we are not able to achieve this secure layer. So, what's the point of having encryption algorithms and DH in PHASE 1 if they are never used? Instead of skip PHASE 1 and we can have the PFS in Phase 2 for serving as a DH and we were hashing algorithms, encryption too.

  (b) the PRE SHARED KEY is actually shared via connect using the DH? Or just a HASH of PRE-SHARED-KEY is generated and sent on the connection for authentication?

  (c) why the aggressive mode can be used for dynamic addressing and not the main mode?

  If please answer queries and correct me if I am wrong somewhere.

  Thank you

  Rakesh Kumar

  (a). theoretically, jumping Phase 1 and done everything in Phase 2 (for aggressive mode only) would probably be a good idea to make it safer.  However, this would require a complete redesign of the IKE protocol.  As you probably already know, aggressive mode is used by default only for VPN remote access, and I've never seen used for a site to any of the customers that I came in contact.  In aggressive mode, in my opinion, would be used only in situations where a large number of VPN tunnels are built and demolished all the time (as with RA VPN) to save on material resources.  But... It is what it is, not a very safe to use method.

  (b) the pre-shared key is used to create a hash and this hash is sent to the remote peer.  If the remote peer can create the same hash using its own pre-shared key, then peers know they share the same secrets.  The problem with aggressive mode is that the hash is sent in plain text format, so if an attacker is able to capture these data they could preform a brute force offline attack.

  (c). I think that this has to do with the fact that the aggressive mode sends its identity in text clear and not must therefore not be pre-configured as a peer answer as it does with tunnels with addresses static at both ends.

  --

  Please do not forget to select a correct answer and rate useful posts

• Can not load the library for algorithms of the pkcs7 pet

  Hello

  Now, I did with the PET framework, specifically the pkcs7_encrypted_encrypt algorithm. It accepts 2 parameters which we expect a symmetric algorithm. Now, using the encryption profile, I couldn't find a way to provide parameters for the symmetric algorithm. In addition, the openssl.cnf file is not delivered with the s/w PS. And without that, the load library removes the pkcs7 algorithms.

  Ideas can help me?

  Thank you.

  Let me see if this is possible. In the meantime, I think the openssl.cnf sample that ships with your specific installation of the OS should work, as twist you a little bit to match your environment. I'm running on AIX, so I had to make sure I was using the openssl.cnf since the compiled version of openssl AIX. Also, make sure that all the paths that you configured in the config file is exist in the directory PS_HOME/openssl $. Finally, make sure that you have created a valid certificate authority ssl certificate. Another item to note is the OPENSSL_CNF environment variable, make sure that it is set and points to the correct file.

  Here is some info:

  Oracle Support Document 2045633.1 (E-SEC: encryption OpenSSL PKCS7 in Peoplesoft) can be found at:

  https://support.Oracle.com/epmos/faces/DocumentDisplay?ID=2045633.1

  In addition, the PET on Oracle support provides lots of good info:

  Oracle Support Document 645892.1 (E-SEC: what is encryption Pluggable PeopleSoft (PET) technology?) can be found at:

  https://support.Oracle.com/epmos/faces/DocumentDisplay?ID=645892.1

• Correction of the goal out of the Center

  Please excuse me if I'm missing the point. I wanted to ask a question on the Lens Correction in Camera Raw that had bothered me, as I looked in the customization of the PCL files.

  One of the parameters in the format of LCP file is ImageXCenter (and ImageYCenter). The default value of 0.5, which I guess means ' to Midway through the image ", that is, dead-center. Is this coordinate the base to the center of the distortion or tile, or chromatic aberration, all three adjustments?

  I appreciate that the lenses are not perfect, and that the imperfections can be biased. But these imperfections would be identical across many copies of the same lens - that is (for example) could all the 50 mm/1.4 lenses have the same X / Center's contact information?

  On the one hand, it is possible that the manufacturing process of a particular lens produces also asymmetrical results; However, the process could produce lenses that are roughly symmetrical, but with slight variations from all sides. I don't know, I don't do lenses, and I'm not used to measure their flaws.

  Then, is what confuses me - while I understand the usefulness of the coordinates of Center in the profiling of your own lenses - is it wise to Adobe to provide profiles of biased target coordinates to the general public?

  As I have explained earlier, the optical center of a lens does not necessarily correspond with the center of the image (even if a lens is perfectly centered around its own planned optical Center).  This is systematic behaviour (i.e., no-unit of behavior).  In other words, you can calculate the value center for multiple units of the same lens, their average together and get something different from 0.5.

  Eric

• Cooling fan continues to operate on the Z30B Satellite after installing Win 10

  The cooling fan is permanently after the upgrade to Windows 10.
  This is the case for the symmetric mode, but also in ECO mode (activated on the touchpad).

  The two modes are defined in passive when running on battery cooling...

  I tried to activate/disable relevant power settings in Win 10 and the ECO utility, but the fan continues to run: it seems that if Win10 is reversing the Toshiba ECO utility.

  Everything worked perfectly before the upgrade.

  This problem can be resolved, or do I have to wait for an update of the Toshiba utility?

  / Breinholm

  I don't know if it will help, but try to reinstall the ECO utility.

  Visit pleasehttp://win10upgrade.toshiba.com to choose your country and you should be able to find the link for downloading drivers, tools and utilities

• you have to turn the standardization IDS engine.

  Hi all.

  I would like to know how can stop us cisco ids engine nomalization? Is this a complicated or not?

  We have a problem when we allow the engine to nomalization of cisco on the ID which is inline mode. part of the asymmetric traffic will be dropped.

  So we'll disable cisco nomalization, now.

  Please give us advice for us.

  Thank you.

  Hi Syjeon,

  You can set the mode of standard-setter for the virtual sensor in question 'Protection of Mode' asymmetric to relax the TCP normalization if the sensor is the asymmetric traffic inspection:

  http://www.Cisco.com/en/us/docs/security/IPS/7.0/Configuration/Guide/CLI/cli_virtual_sensors.html#wp1034136

  You'll want to change the "'-TCP-escape-protection-mode inline" option "strict" to "asymmetric" to each of the virtual sensors see asymmetric traffic. "

  -Justin

• clarification of the C500 software

  OK I've never owned a Palm tree before I just learn about them. I bought a c500 IBM WorkPad outside of ebay for my wife. It came with a bunch of medical programs that I thought might be useful. Now from what I have read on the forums the c500 is the same as the m500 (marked just for IBM). I think I got a good deal ($45), but it did come with a manual or software original (it came with a CD burned with the above software but do not know what version). What I want to know is: 1 - is the software on the Palm (OS v4.0) the correct version or should I update? 2. is there a version of the desktop for Vista software that will work with the m500? I read a post that said 4.1.4e would work with Vista, but then I found a note that it won't work with multicore. (I bicoeur) 3 - (I know it's the software section but...) Can I get a USB dock for it? This one came with a serial cable. Thanks for any help!

  I will answer you questions in red below.

  OK I've never owned a Palm tree before I just learn about them. I bought a c500 IBM WorkPad outside of ebay for my wife. It came with a bunch of medical programs that I thought might be useful. Now from what I have read on the forums the c500 is the same as the m500 (marked just for IBM). I think I got a good deal ($45), but it did come with a manual or software original (it came with a CD burned with the above software but do not know what version). What I want to know is: 1 - is the software on the Palm (OS v4.0) the correct version or should I update? The version of the operating system on the handheld is correct. Click on the following link for the page Web of Palm for the specifications of the m500.

  http://kb.palm.com/SRVS/CGI-BIN/WEBCGI.EXE/, /? St = 1291, E = 0000000000332754940, K = 1328, Sxi = 1 t. = knowledge, Question = Ref (q_activetab): str(learn)

  2. is there a version of the desktop for Vista software that will work with the m500? You can download the version 4.1.4 of the support page for your handheld on the Palm support Web site.  http://KB.Palm.com/SRVS/Nua/launchTab.asp?t=home&fn=m-series&MN=M500&CN=unlocked

  I read a post that said 4.1.4e would work with Vista, but then I found a note that it won't work with multicore. (I have dual-core) It will not work with several processors, the symmetrical treatment using 2 or 4 processors on a single card of mother. He will work with the multi-core processors. Your core duo processor will work fine.

  3. (I know it's the software section but...) Can I get a USB dock for it? You can do an internet search for the cradle. Arre there are many different sources for the cradle.

  This one came with a serial cable. Thanks for any help! VErsion 4.

  Message relates to: Palm i705

• Guidelines: how to see them all the time?

  Given that I'm used to using photoshop, and it has the very useful guide lines, wich stay where I put them and keep visible all the time. Now I'm getting FreeHand and guidelines on this program are a little misfortune to stay visible. I can see them only when I set free them to view > Guides > edit > choose the line, but once I click anywhere else with the Subselection pointer tool to move other objects it disappears! Otherwise, I got to see them all, so all other objects selected, is dragging on the paper with the pointer tool. But is does not help me when I do the symmetries with text and other things...
  Thanks for any answer!

  > Now I'm trying to FreeHand
  > and this program guidelines are a little misfortune to stay visible.

  Guides in FreeHand are on a dedicated layer of Guides. Open the layers panel
  and drag the guide layer to the top. Make sure the box of visibility
  In addition, the Guides layer is checked.

  In FHMX under Mac OS 10.4 and later versions, an OS conflict prevents the default
  Show/hide Guides keyboard shortcut work. Assign a second shortcut
  own using Edit > keyboard shortcuts > view > Guides > Show. It should work.

  You will find much more information on the guides in the help of FH files.

  Judy Arndt

• Invalid key exception: no type of key: public key RSA Sun, 1024 bits

  I'm trying to recover Microsoft Keystore certificates and extract its key using SunMSCAPI in the jdk 1.6. It gives me an exception for invalid key when I try to wrap the symmetric key (what was once to perform AES encryption on data), using the RSA algorithm.
  
  Code snippet:

             // RSA 1024 bits Asymmetric encryption of Symmetric AES key              
              // List the certificates from Microsoft KeyStore using SunMSCAPI.
                    System.out.println("List of certificates found in Microsoft Personal Keystore:");
  
                     KeyStore ks = KeyStore.getInstance("Windows-MY", "SunMSCAPI"); 
                     ks.load(null, null) ;
                     Enumeration en = ks.aliases() ;
                     PublicKey RSAPubKey = null;
                     Key RSAPrivKey = null;
                     int i = 0;
                     while (en.hasMoreElements()) {
                          String aliasKey = (String)en.nextElement() ;              
                          X509Certificate c = (X509Certificate) ks.getCertificate(aliasKey) ;     
                          String sss = ks.getCertificateAlias(c);
                          if(sss.equals("C5151997"))
                          {
                          System.out.println("---> alias : " + sss) ;
                          i= i + 1;
                          String str = c.toString();
                          System.out.println(" Certificate details : " + str ) ;
                        RSAPubKey = c.getPublicKey();
                          RSAPrivKey = ks.getKey(aliasKey, null);  //"mypassword".toCharArray()
                          Certificate[] chain = ks.getCertificateChain(aliasKey);     
                          }
                     }
                     
                     System.out.println("No of certificates found from Personal MS Keystore: " + i);
                  
              // Encrypt the generated Symmetric AES Key using RSA cipher      
                      Cipher rsaCipher = Cipher.getInstance("RSA/ECB/PKCS1Padding", ks.getProvider().getName());            
                     rsaCipher.init(Cipher.WRAP_MODE, RSAPubKey);
                     byte[] encryptedSymmKey = rsaCipher.wrap(aeskey);    
                     System.out.println("Encrypted Symmetric Key :" + new String(encryptedSymmKey));
                     System.out.println("Encrypted Symmetric Key Length in Bytes: " + encryptedSymmKey.length);
                     
                     // RSA Decryption of Encrypted Symmetric AES key
                     rsaCipher.init(Cipher.UNWRAP_MODE, RSAPrivKey);
                     Key decryptedKey = rsaCipher.unwrap(encryptedSymmKey, "AES", Cipher.SECRET_KEY);

  Output:
  
  List of certificates in Microsoft personal Keystore:
  -> alias: C5151997
  Certificate details:]
  [
  Version: V3
  Object: CN = C5151997, O = SAP - AG, C = OF
  Signature algorithm: SHA1withRSA, OID = 1.2.840.113549.1.1.5
  
  Key: Sun public key RSA 1024 bits
  modulus: 171871587533146191561538456391418351861663300588728159334223437391061141885590024223283480319626015611710315581642512941578588886825766256507714725820048129123720143461110410353346492039350478625370269565346566901446816729164309038944197418238814947654954590754593726047828813400082450341775203029183105860831
  public exponent: 65537
  Validity: [from: Mon Jan 24 18:17:49 IST 2011,]
  [To: Wed Jan 23 18:17:49 IST 2013]
  Issuer: CN = SSO_CA, O = SAP - AG, C = OF
  Serial number: [4d12c509 eb85 00000005]
  
  Certificate extensions: 6
  [1]: ObjectId: 2.5.29.14 criticality = false
  [SubjectKeyIdentifier
  [KeyIdentifier
  0000: 07 E5 83 A1 B2 B7 DF 6 b 4 b 67 1 and 9 D 42 C9 0 D F4... kKg... A.M..
  0010: 35 76 D3 F7 5v...
  ]
  ]
  
  [2]: ObjectId: 2.5.29.35 criticality = false
  [AuthorityKeyIdentifier
  [KeyIdentifier
  0000: E4 C4 2 93 20 AF DA 4 C 53 68 4A C0 CE E7 F2, 30. .. L.ShJ... 0
  0010: 0C 3 B 8 C 9 A. ;.
  ]
  
  ]
  
  [3]: ObjectId: 1.3.6.1.4.1.311.21.7 criticality = false
  Unknown extension: coded DER BYTE string =
  0000: 04 30 30 2 06 26 2 b 06 01 04 01 82 37 15 08 82.00... & +... 7...
  0010: D1 E1 73 E4 84 FE 0B FD 84 8 B 15 83 E5 1B 90 83... s.............
  0020: 43 81 62 84 B1 A1 E6 DA 50 14 02 01 64 02 9TH D3... C.b... P...d.
  0030: 01 1B...
  
  
  [4]: ObjectId: 2.5.29.17 criticality = false
  [SubjectAlternativeName
  RFC822Name: [email protected]
  ]
  
  [5]: ObjectId: 2.5.29.15 criticality = true
  [KeyUsage
  DigitalSignature
  Non_repudiation
  Key_Encipherment
  Data_Encipherment
  ]
  
  [6]: ObjectId: 2.5.29.19 criticality = true
  BasicConstraints:]
  CA:false
  PathLen: undefined
  ]
  
  ]
  Algorithm: [SHA1withRSA]
  Signature:
  0000: B3 C5 8 66 92 F4 CC D7 ED 6 51 12 63 52 18 B9... f... mQ.c... R.
  0010: B8 A6 78 7 78 18 ED F7 DA 71 09 AE 49 23 C8 C9... .. x...x. q... I have #.
  0020: F5 2F 32 0F D1 C0 08 4 2 B 6 D 3 C B9 5F 5B B5 11. 2 /... L + m <... _ [.]
  0030: 05 D9 CA E6 F9 0 a 94 14 E7 C6 7 a 63 DB FE E5 CE... z.c...
  94 0040:48 8 c 0D 77 92 59 34 6 77 1 a 24 FE E3 C1 H...w. Y .4nw$...
  0050: 0 B 52 6 D8 HAS 7TH 22 13 71 F8 AF 17 64 4F C8 D1 D7... RJ. ». q... dO
  0060: 83 EA 2D 6a CA 7F C3 84 37 15 FE 99 73 1 D 7 C D1... - j... 7... s...
  0070:6 B4 99 09 62 B9 0F 18 33 4 66 C6 7 a 9F C0 DB m... b... 3L. FZ...
  
  ]
  None of the found certificates in personal key MS: 1
  Exception in thread "main" java.security.InvalidKeyException: unsupported key type: RSA Sun public key, 1024 bits
  modulus: 171871587533146191561538456391418351861663300588728159334223437391061141885590024223283480319626015611710315581642512941578588886825766256507714725820048129123720143461110410353346492039350478625370269565346566901446816729164309038944197418238814947654954590754593726047828813400082450341775203029183105860831
  public exponent: 65537
  at sun.security.mscapi.RSACipher.init(RSACipher.java:176)
  at sun.security.mscapi.RSACipher.engineInit(RSACipher.java:129)
  at javax.crypto.Cipher.init(DashoA13*..)
  at javax.crypto.Cipher.init(DashoA13*..)
  at com.sap.srm.crpto.client.applet.CryptoClass.main(CryptoClass.java:102)
  
  Published by: sabre150 on July 18, 2011 03:47
  
  Added [code] tags to make the code readable.

  A little research indicates the key classes gets by

                        RSAPubKey = c.getPublicKey();
                             RSAPrivKey = ks.getKey(aliasKey, null);  //"mypassword".toCharArray()
  

  are sun.security.rsa.RSAPublicKeyImpl and sun.security. * mscapi *. RSAPrivateKey. It seems that Cipher objects from the SunMSCAPI provider cannot accept class sun.security.rsa.RSAPublicKeyImpl RSA public keys and that the SunMSCAPI will accept only class sun.security.mscapi.RSAPrivateKey RSA private keys.

  This came in another form a couple of years. It makes sense because the packaging/encryption with a public key does not represent a security problem (there no secret in cryptographic operations) once done outside MSCAPI can use any provider who has the ability , BUT unpacking/decryption must be done with the SunMSCAPI provider which it delegates to the MSCAPI.

  My test code of work based on your code for implementation of this approach is:

          // RSA 1024 bits Asymmetric encryption of Symmetric AES key
          // List the certificates from Microsoft KeyStore using SunMSCAPI.
          System.out.println("List of certificates found in Microsoft Personal Keystore:");
  
          KeyStore ks = KeyStore.getInstance("Windows-MY", "SunMSCAPI");
          ks.load(null, null);
          Enumeration en = ks.aliases();
          PublicKey RSAPubKey = null;
          Key RSAPrivKey = null;
          int i = 0;
          while (en.hasMoreElements())
          {
              String aliasKey = (String) en.nextElement();
              X509Certificate c = (X509Certificate) ks.getCertificate(aliasKey);
              String sss = ks.getCertificateAlias(c);
              if (sss.equals("rsa_key")) // The alias for my key - make sure you change it back to your alias
              {
                  System.out.println("---> alias : " + sss);
                  i = i + 1;
                  String str = c.toString();
                  System.out.println(" Certificate details : " + str);
                  RSAPubKey = c.getPublicKey();
           System.out.println(RSAPubKey.getClass().getName());
                 RSAPrivKey = ks.getKey(aliasKey, null);  //"mypassword".toCharArray()
          System.out.println(RSAPrivKey.getClass().getName());
                  Certificate[] chain = ks.getCertificateChain(aliasKey);
              }
          }
          System.out.println(ks.getProvider().getName());
          System.out.println("No of certificates found from Personal MS Keystore: " + i);
          Cipher rsaCipher = Cipher.getInstance("RSA/ECB/PKCS1Padding");//, ks.getProvider().getName());       !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
              rsaCipher.init(Cipher.WRAP_MODE, RSAPubKey);
          byte[] keyBytes =
          {
              1, 2, 3, 4, 5, 6, 7, 8, 2, 3, 4, 5, 6, 7, 8, 9
          };
          SecretKey aeskey = new SecretKeySpec(keyBytes, "AES");
          byte[] encryptedSymmKey = rsaCipher.wrap(aeskey);
          System.out.println("Encrypted Symmetric Key :" + Arrays.toString(encryptedSymmKey));
          System.out.println("Encrypted Symmetric Key Length in Bytes: " + encryptedSymmKey.length);
  
          // RSA Decryption of Encrypted Symmetric AES key
          Cipher unwrapRsaCipher = Cipher.getInstance("RSA/ECB/PKCS1Padding", ks.getProvider().getName());       //!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
          unwrapRsaCipher.init(Cipher.UNWRAP_MODE, RSAPrivKey);
          Key decryptedKey = unwrapRsaCipher.unwrap(encryptedSymmKey, "AES", Cipher.SECRET_KEY);
          System.out.println("Decrypted Symmetric Key :" + Arrays.toString(decryptedKey.getEncoded())); // Matches the 'keyBytes' above
  

• Single-sign - on Documentum:

  Hello everyone,.

  Here is my scenario: we have a documentum repository and users see the respective files using their user id and password through documentum taskspace. We want to synchronize the LDAP with Livecycle and apply RM policies to all documents in the repository using the process of LC. So, if the user click on a document to open it, it should automatically check his letters of credence and the document must be opened only if the user is defined in the policy. This avoids enter their user id and password again once for each document.

  How to achieve this, single-sign - on? I don't know that the RM provides. But I don't get the markets / appropriate document on how to apply it. Also, I am a beginner in implementing RM

  Another question: I checked applying policies on the document and open it through another PC. I have observed that we need to install the SSO certificate so that it connects to the LC Server to validate its credentials. We need to ask all users to install the certificate for them to open the applied strategy papers? Even if all the users are in the internal network of the Organization?

  Help, please.

  Thank you

  Krishna

  Krishna

  I do not know if I understand your last entry completely, but let me clarify... Rights management uses digital certificates (asymmetric encryption) to encrypt documents.  Encryption is done using symmetrical or key encryption 'secret' with key 128 or 256 bit Advanced Encryption Standard (AES) main forces.  No certificate must be installed on any system of indvidual.

  The AES keys are stored and managed on the RM server, when you open a document protected mode 'online', the key is introduced in customer's device so that the document can be decrypted, the key is not on the client computer.

  Concerning

  Steve

• Drive C: locked TPM (security device)

  I tried to restore an image of my drive C: using Macrium Reflect.  Macrium said that the C: drive is locked and he can't find the drive, it finds that the backup USB drive so I can choose the image I want to use for the restore but cannot select where I want the image to put because the C: drive is not found. I have used nto bit locker and the drive is not encrypted.  In all other respects, I can access the C: drive and operate the computer normally (read, write, change etc any file). I also have a pop-up to start up, which said: "there was a problem connecting to the module of TPM (safety device) on this computer.  It is possible that anti virus software or a firewall is blocking the connection.  A disk missing or disabled could cause this problem.  Please refer to the online documentation for more information."  I've disabled the firewall and disabled security of the BIOS chip and have disabled the TPM, but none of these things to solve the problem.

  http://www.Macrium.com/support.asp

  I suggest you might try their support, because it is their product that you have problems with.

  It can be a normal problem with their software.

  Read what is the TPM secure:

  http://support.Dell.com/support/topics/global.aspx/support/DSN/document?c=us&l=en&s=Gen&docid=E75E35123E8AC4D0E030030ABD623A10

  Trusted Platform Module, or TPM module, is a security device that holds the keys generated by computer for encryption. This is a hardware solution which prevents hacking attempts to capture passwords, encryption and other data sensitive keys. The security features provided by the TPM secure are supported internally by

  • Hash
  • Generation of random numbers
  • Asymmetric key generation
  • Asymmetric encryption/decryption

  Each TPM has a unique signature initialized during the process that improves the effectiveness of trust/security of silicon manufacturing. Every TPM must have an owner before it can be used. The user of the TPM secure must be physically present to support. Once this procedure is run and the TPM has a unique owner, the TPM module is enabled.

  See you soon.

  Mick Murphy - Microsoft partner

• Portfolio "default" exists for native enctyption?

  After you have set the following parameters in sqlnet.ora

  [28 SEP-000001 2014 16:33:44:984]-> PARAMETER TABLE has THE CONTENT FOLLOWING < -.

  [28 SEP-000001 2014 16:33:44:984]   DIAG_ADR_ENABLED = OFF

  [28 SEP-000001 2014 16:33:44:984]   TRACE_DIRECTORY_SERVER = /u01/app/oracle/product/11.2.0/dbhome_1/network/trace

  [28 SEP-000001 2014 16:33:44:984]   SQLNET. ENCRYPTION_SERVER = REQUIRED

  [28 SEP-000001 2014 16:33:44:984]   ALLOWED_LOGON_VERSION = 11

  [28 SEP-000001 2014 16:33:44:984]   TRACE_LEVEL_SERVER = SUPPORT

  [28 SEP-000001 2014 16:33:44:984]   ADR_BASE = / u01/app/oracle

  [28 SEP-000001 2014 16:33:44:984]   NAMES. DIRECTORY_PATH = (TNSNAMES, EZCONNECT)

  [28 SEP-000001 2014 16:33:44:984]   TRACE_FILELEN_SERVER = 1024000

  [28 SEP-000001 2014 16:33:44:984]   SQLNET. CRYPTO_SEED = sdlfkj40vlc045oisdlkcv02

  [28 SEP-000001 2014 16:33:44:984]   TRACE_FILE_SERVER = server.log

  [28 SEP-000001 2014 16:33:44:984]   SQLNET. ENCRYPTION_TYPES_SERVER = (AES192, AES128, AES256, RC4_256)

  [28 SEP-000001 2014 16:33:44:984]   TRACE_TIMESTAMP_SERVER = WE

  [28 SEP-000001 2014 16:33:44:984]   SQLNET. CRYPTO_CHECKSUM_TYPES_SERVER = (SHA1 AND MD5)

  [28 SEP-000001 2014 16:33:44:984]   TRACE_FILENO_SERVER = 6

  [28 SEP-000001 2014 16:33:44:984]   SQLNET. CRYPTO_CHECKSUM_SERVER = REQUIRED

  [28 SEP-000001 2014 16:33:44:984] - INFORMATION ABOUT PARAMETERS SOURCE ENDS.

  net traffic is encrypted. Oracle uses some predefined wallet? How server and client agree on the symmetric keys on net probably public?

  Setting up Secure Sockets Layer authentication

  Here, it's a good start.

  SSL adds another "layer" of security, digital certificates.