Thursday, June 9, 2016

Derek McAuley: Security of Data on Disk

Derek McAuley


  • Micro controller
  • Flash memory
  • Solid State Drive
  • Blocks
  • Cells
  • Magnetic drive
  • Magnetic read head
  • Magnetic field strength
  • Thresholding
  • Hard disk drive
  • Flash drive
  • Magnetic seek time
  • Bad block redirection
  • Good blocks
  • Semiconductor memory
  • Wear leveling

Robert Miles : Public Key Cryptography

Robert Miles



  • Public-key cryptography (公開鍵暗号)

Richard Mortier: Encryption and Security Agencies

Richard Mortier

Secure Shell: Logging In Without Password After Placing Public Key on Remote Server

Command:

$ ssh remote.servername.com
Welcome to Ubuntu 16.04 LTS (GNU/Linux 4.4.0-22-generic x86_64)

 * Documentation:  https://help.ubuntu.com/
Last login: Thu Jun  9 21:33:51 2016 from 123.456.789.01

Secure Shell: authorized_keys: Placing the public key on the remote server

Commands:

$ ssh username@remote.servername.com
username@remote.servername.com's password:
Welcome to Ubuntu 16.04 LTS (GNU/Linux 4.4.0-22-generic x86_64)

 * Documentation:  https://help.ubuntu.com/
Last login: Tue May 17 21:41:16 2016 from 123.456.789.01


$ ls -al
合計 40
drwxr-xr-x 4 username username 4096  6月  9 21:04 .
drwxr-xr-x 3 root root 4096  5月 12 22:42 ..
-rw------- 1 username username 1770  5月 17 21:40 .bash_history
-rw-r--r-- 1 username username  220  5月 12 22:42 .bash_logout
-rw-r--r-- 1 username username 3771  5月 12 22:42 .bashrc
drwx------ 2 username username 4096  5月 12 22:50 .cache
drwxrwxr-x 2 username username 4096  5月 17 00:09 .nano
-rw-r--r-- 1 username username  675  5月 12 22:42 .profile
-rw-rw-r-- 1 username username   66  5月 17 00:09 .selected_editor
-rw-r--r-- 1 username username    0  5月 12 22:52 .sudo_as_admin_successful
-rw-r--r-- 1 username username  400  6月  9 21:04 id_rsa.pub


$ cat id_rsa.pub
ssh-rsa AAAAB3NzaC1yd2EAAAADAQABAAABAQDNN6bT33VQ4CXWmFBx0H428yw/SHwARc91vc/Z/CExXrjUb3uhUaHb4EHCl7/pXpJgyyRr6dE5sl2FlE3jPWua2ooZ3uXof7NkiK2WMPVDpWZeKE2zxynEg5yPw41AtwyxI+Y15Hbt4WNEEhXsHunCu+ekGf3d3w67VCxGz8aA1Tbxe6zOs3e9VXNrgQW99ycD5xtXAXh8x5Jt+HhgAma5P7+gQ0rSMKSYsxKxr7TcR1k5yg9uC02u8NgqjuQDXoqLO9I+CGxv1rfFyl6n8fUlclPFgftJzYK9JuzHxEl3yMFSH/izSviYKp0MTph1dH3UWa5DiIAf8blDmZVkPCkT


$ mkdir .ssh
$ chmod 700 .ssh/
$ cat id_rsa.pub >> .ssh/authorized_keys
$ chmod 600 .ssh/authorized_keys
$ cd .ssh/


$ ls -al
合計 12
drwx------ 2 username username 4096  6月  9 21:36 .
drwxr-xr-x 5 username username 4096  6月  9 21:35 ..
-rw------- 1 username username  400  6月  9 21:36 authorized_keys


$ cat authorized_keys
ssh-rsa AAAAB3NzaC1yd2EAAAADAQABAAABAQDNN6bT33VQ4CXWmFBx0H428yw/SHwARc91vc/Z/CExXrjUb3uhUaHb4EHCl7/pXpJgyyRr6dE5sl2FlE3jPWua2ooZ3uXof7NkiK2WMPVDpWZeKE2zxynEg5yPw41AtwyxI+Y15Hbt4WNEEhXsHunCu+ekGf3d3w67VCxGz8aA1Tbxe6zOs3e9VXNrgQW99ycD5xtXAXh8x5Jt+HhgAma5P7+gQ0rSMKSYsxKxr7TcR1k5yg9uC02u8NgqjuQDXoqLO9I+CGxv1rfFyl6n8fUlclPFgftJzYK9JuzHxEl3yMFSH/izSviYKp0MTph1dH3UWa5DiIAf8blDmZVkPCkT


Man page (sshd):


~/.ssh/authorized_keys
Lists the public keys (DSA, ECDSA, Ed25519, RSA) that can be used for logging in as this user.  The format of this file is described above.  The content of the file is not highly sensitive, but the recommended permissions are read/write for the user, and not accessible by others. If this file, the ~/.ssh directory, or the user's home directory are writable by other users, then the file could be modified or replaced by unauthorized users.  In this case, sshd will not allow it to be used unless the StrictModes option has been set to “no”.


Secure Copy (scp): Sending Public Key to Remote Server

Command:

$ scp .ssh/id_rsa.pub username@remote.servername.com:~/
username@remote.servername.com's password:
id_rsa.pub                                                                                                                100%  400     0.4KB/s   00:00                

ssh-keygen: Generating Private and Public Keys (公開鍵と秘密鍵を作る)


Commands:

$ ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/Users/username/.ssh/id_rsa): 
/Users/username/.ssh/id_rsa already exists.
Overwrite (y/n)? y
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /Users/username/.ssh/id_rsa.
Your public key has been saved in /Users/username/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:xCFSgzCQb5J5yjX911Xvdav018XVmXbfibdoEYxjXs0


$ ls -l .ssh/
total 24
-rw-------  1 username  staff  1679 Jun  4  2014 id_rsa
-rw-r--r--  1 username  staff   394 Jun  4  2014 id_rsa.pub
-rw-r--r--  1 username  staff  1118 May 16 10:26 known_hosts


$ cat .ssh/id_rsa
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----


$ cat .ssh/id_rsa.pub
ssh-rsa AAAAB3NzaC1yd2EAAAADAQABAAABAQDNN6bT33VQ4CXWmFBx0H428yw/SHwARc91vc/Z/CExXrjUb3uhUaHb4EHCl7/pXpJgyyRr6dE5sl2FlE3jPWua2ooZ3uXof7NkiK2WMPVDpWZeKE2zxynEg5yPw41AtwyxI+Y15Hbt4WNEEhXsHunCu+ekGf3d3w67VCxGz8aA1Tbxe6zOs3e9VXNrgQW99ycD5xtXAXh8x5Jt+HhgAma5P7+gQ0rSMKSYsxKxr7TcR1k5yg9uC02u8NgqjuQDXoqLO9I+CGxv1rfFyl6n8fUlclPFgftJzYK9JuzHxEl3yMFSH/izSviYKp0MTph1dH3UWa5DiIAf8blDmZVkPCkT OpenShift-Key


Vocabularies:
  • Public-key cryptography (公開鍵暗号)
  • Symmetric-key algorithm (共通鍵暗号)

素読吟味(そどくぎんみ)


  • Kansei Reforms (寛政の改革)
  • Shigin (詩吟(しぎん))

学問吟味(がくもんぎんみ)

  • Kansei Reforms (寛政の改革)
  • Edo period (江戸時代)

科挙(かきょ)


  • Imperial examination (科挙(かきょ))
  • 試験

心学(しんがく)

心学(しんがく) = 石門心学(せきもんしんがく)

基盤:

  • 神道
  • 儒教
  • 仏教

吏僚(りりょう)

吏僚(りりょう) = 官吏(かんり)

朱子学(しゅしがく)


宋明理学(そうみんりがく) → 朱子学(しゅしがく)

宋明理学(そうみんりがく) = 理学(りがく)

宋明理学(そうみんりがく) = 道教(どうきょう)
  • Cheng-Zhu school (朱子学(しゅしがく))
  • Zhu Xi (朱子(しゅし))
  • Neo-Confucianism (宋明理学(そうみんりがく))
  • Taoism (道教(どうきょう))

孝経(こうきょう)

経書(けいしょ) → 十三経(じゅうさんけい、じゅうさんぎょう) → 孝経(こうきょう)

  • Classic of Filial Piety (孝経(こうきょう))
  • Zengzi (曾子(そうし))