&

:
(, ) (
).

: ()
(
).

: ( )

.

:

.

:
.

:

.

:
.

:
.

Plaintext:
Plaintext .

Ciphertext:
Ciphertext .

This is
plaintext

(
)

&cW*4l
%$?e}

()

This is
plaintext

(
)

(/),
, :


,
.

,
.

 (1)

(..
SSL)



:
:

 (2)

(non-repudiation)



( , digital signature)

Electronic Data Interchange (EDI)

,


.



:

,
.


Directive 1999/93/EU

.. 150/2001 ( 125//2001)

. 248/71 ( 603//2002)

.. 342/2002

, .... ...


01011101101101011011011010100010100110
10

Hush
1101010
1010000

0111010

Message:
0101110110110101101101
101010001010011010
DS:0111010

1. (one way hash)

(message digest) . ,
.
2. , .
. .
3. ( )
(
).

1. (,
, ).
2. ,
.
3. , ,
( ).
4. ,
. ,
.

 (PKI)

(
)
PKI


RA (registration authority).
() (, email ).
CA

CA (certification Authority). CA
(Certificate).
(
)


(
)

Directory (LDAP ).
( 131 )

[Certification Authority (CA)]

[Registration Authority (RA)]

(Clients)

(Digital certificates)

(Certificate
Distribution System)

(Certificate repository)

 ()

:



.
(.. , , e-mail
..).

()
(Certification):

.

(Validation):
(
).

/ (
)

(.. adobe acrobat, word)

:
.

:
.

(Certification Authority, CA).

,

.

(..
,

).

CA? (Trusted Third Party)












:

.
Registration Authority ( ):
)

.
Key Generator ( ):
) ,
.
Certificate Directory ( ):
)
.
Key server ( ):
)
.
.

Timestamp Agent: .
Notary Agent: .
Key Escrow Agent:
.

PKI CA

(CA).

CA.

CA.
CA
.

 PKI

CA.

CA
CA .

,
CA,
.

 PKI
/

:





.

.
.
.

:




.
.
CA

.

Online/Offline .

:


 ..

:


(Delta CRL)

.

CRL

(bandwidht, distributed indexes, ..).

 0 .500

(..
, , ..).

.500 .509
.