Name:_______________________ COMP-2073

Objectives Get to know openssl Get to know cryptography Get to know linux Requirements Three virtual machines in lab manager: Windows XP,7 and Linux You can turn off all firewall rules for this lab Please make sure to have your id in your screenshots Please review the references below for encryption and so on Sc means screenshot Lab 4 1. Use openssl on backtrack to encrypt and decrypt a file with symmetric encryption a. Create a file called plaintext (sc) b. Use a symmetric cipher to encrypt the file (aes for example) c. opensslenc -aes-128-cbc -salt -in plaintext.txt -out cipher.txt for example d. sc the command and the result with cat e. Now decrypt (check references or notes) hint use -d f. Screenshot Use openssl on backtrack to generate keys (you can change the names) a. Generate the private key b. opensslgenrsa -out myprivatekey (sc) c. Get the public key d. opensslrsa -in myprivatekey -pubout -out public.key (sc) Email your public key to a friend (or instructor) a. Tell me who it is b. Ask them to encrypt a tiny message like Hello yourname c. Screenshot the file in an email d. Then have your friend email the encrypted file to you e. Try to decrypt it hint: check references,notes or use rsautl f. Screenshot of your successful decrypt g. Remember you will do the same with your friends public key Run hashing algorithms a. Generate an md5sum using md5sum on backtrack b. For example: echo n my message | md5sum c. Screenshot that and an md5sum calculator online showing the same hash Generate a shadow hash a. http://www.madboa.com/geek/openssl/#passwd-md5 b. Read that first c. Screenshot of your md5hash with a salt similar to backtrack hashes

2.

3.

4.

5.

Lab Review Questions 1) In your own words, describe what you learned by completing this lab.

2) Why would we use hashing when we download software from torrent sites

3) When downloading a file or program why might I want to hash it and see the signature

4) Explain the reason we have digital signatures?

Evaluation (5 Marks) Completion of Projects Discussion Questions

4M 1M

References: http://www.miraclesalad.com/webtools/md5.php http://bsdsupport.org/q-how-do-i-use-openssl-to-encrypt-files/ http://www.madboa.com/geek/openssl/#encrypt-simple