Glossary of Security and Privacy Terms



DES (data encryption standard) - is a block encryption method originally developed by IBM. It has since been certified by the U.S. government for transmission of any data that is not classified top secret. DES uses an algorithm for doing private-key encryption. The key consists of 64 bits of data, which are transformed and combined with the first 64 bits ofthe message to be sent. To do the encryption, the message is broken up into 64-bit blocks so that each can be combined with the key using a complex 16-step process. DES is a very weak encryption standard and shouldn't be used for senstive data.

Encryption - Encryption is the process of changing data into a form that can be read only by the intended receiver. To decipher the message, the receiver of the encrypted data must have the proper decryption key. In traditional encryption schemes, the sender and the receiver use the same key to encrypt and decrypt data. Public-key encryption schemes use two keys: a public key, which anyone may use, and a corresponding private key, which is possessed only by the person who created it. With this method, anyone may send a message encrypted with the owner's public key, but only the owner has the private key necessary to decrypt it. PGP (Pretty Good Privacy) and DES (data encryption standard) are two of the most popular public-key encryption schemes. For more information go to http://security.tao.ca/crypt_basics.html

Firewall - protects any networked server or computer from outside interference. It may either be a piece of hardware or a software program that blocks outside connections to your machine. With more and more home computers permanently connected to the internet through cable and adsl, software firewalls are becoming increasingly popularized.

Ghosts - are residual traces of data left when overwritten by other data. When you simply put something in the trash and empty it - there will be ghosts of your original data left behind. For more information on ghosts and secure file-wiping go to http://security.tao.ca/wipe.shtml

Mail-to-News Gateway - allows you to post to newsgroups via e-mail. These gateways are basically anonymous remailers that post your message to the selected news group.

Passphrase - is generally longer than a password and includes letters, number and random characters. In encrypted communications, one should always use a passphrase rather than a password. For a 128 bit cipher if your passphrase is completely random you will need a minimum of 20 characters

PGP - stands for Pretty Good Privacy which is a program that can be run in any computer environment to facilitate the encryption of data such as email and other text files. With PGP you can encrypt email to other PGP users, and you can also encrypt data on your hard disk so that it is only readable by yourself or others with the passphrase. For more information go to http://security.tao.ca/pgpnow.shtml

Remailer - a computer service which privatizes your e-mail. A remailer is in sharp contrast to the average Internet Service Provider [ISP] which is terribly anti-private. An anonymous remailer allows you to send electronic mail to a Usenet news group, or to a person, without revealing your true name or e-mail address to the recipient. For more information on various types of remailers go to http://security.tao.ca/email.shtml

Secure Socket Layer (SSL) - SSL is a transaction security standard developed to enable secure, encrypted transactions to take place over the otherwise notoriously nonsecure Internet. Connections always use the prefix https:// (Secure HTTP) instead of http://. For more information check out http://security.tao.ca/ssl.shtml.

SSH - SSH is a protocol that allows you to encrypt all data travelling from your computer to your server or other computer using different types of encryption algorithms.The server you are connecting to must be running SSH, and you must be running a secure shell client on your own machine as well. For more information - go to http://security.tao.ca/ssh.shtml

Steganography - takes one piece of information and hides it within another. Computer files (images, sounds recordings, even disks) contain unused or insignificant areas of data. Steganography takes advantage of these areas, replacing them with information (encrypted mail, for instance). The files can then be sent or transported without anyone knowing what really lies inside of them. For more information go to http://security.tao.ca/stego.shtml

Trojan - It "is a piece of unauthorized code hidden within a legitimate program (101)." Trojans can carry viruses and other programs that may damage your computer once you run the program that the trojan is hidden in. Trojan horses may be either simple batch files or code containing redirected escape sequences intercepted by the ANSI.SYS driver.

Tunneling - Tunneling is a way to channel communications between a server and a remote user. Secure methods of tunneling involve encryption.

Usenet - Usenet is a worldwide network of thousands of Unix systems with a decentralized administration. The Usenet systems exist to transmit postings to special-interest newsgroups covering just about any topic you can imagine. Newsgroups can be thought of as public-access bulletin boards and can be accessed via the web or newsgroup reader software.

Web Proxies - can be used to help you remain anonymous on the web. They are essentially servers that allow your data connection to run through them, thus hiding your IP address -- so the web site you are visiting only sees the IP address of the proxy that delivered the pages. For more information check out http://security.tao.ca/web.shtml.





security.tao.ca index.



maintained by securitysite at tao dot ca
Comments and additions always welcome, our feedack form.