MT M HC NNG CAO

Bi 1 Kin trc mt m ca Windows

1
2

Tng quan v DLL ng dng mt m trong Windows CryptoAPI CryptoAPI 2.0 v CNG
Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows 2

3 4

Tng quan v DLL

Th vin lp trnh l g?

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

Tng quan v DLL

Li ch ca vic s dng th vin?

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

Tng quan v DLL

Cch thc mt ngi s dng th vin in t?

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

Cch 1: Ti v my ri c dn

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

Cch 1: c cun no, ti cun

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

Tng quan v DLL

Cch thc mt chng trnh s dng th vin lp trnh?

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

Cch 1: Lin kt tnh

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

Cch 2: Lin kt ng

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

10

Tng quan v DLL

So snh Lin kt tnh v Lin kt ng!

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

11

Tng quan v DLL

Trong Windows, file th vin lin kt ng c phn m rng l "DLL"

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

12

1
2

Tng quan v DLL ng dng mt m trong Windows CryptoAPI CryptoAPI 2.0 v CNG
Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows 13

3 4

ng dng mt m trong Windows

K tn cc ng dng ca Microsoft trong Windows c s dng mt m!

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

14

ng dng mt m trong Windows

1. Explorer

2. Internet Explorer IIS, CA

3. Outlook, Outlook Express, Windows Mail 4. Word, Excel, PowerPoint,...

5. Remote Desktop Connection

v cn rt nhiu!!!!!!!!
Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

15

ng dng mt m trong Windows

1. C rt nhiu ng dng c s dng mt

m. Vy chng s dng thut ton m

ha, bm, k s no?

2. Cc ng dng trin khai cc thut ton th no?
16

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

ng dng mt m trong Windows

Chc nng mt m ca cc ng dng ca Microsoft trong Windows

c cung cp thng qua th vin

"advapi32.dll" (C:\Windows\System32)
Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

17

1
2

Tng quan v DLL ng dng mt m trong Windows CryptoAPI CryptoAPI 2.0 v CNG
Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows 18

3 4

CryptoAPI

CryptoAPI = Cryptographic API = Cryptographic Application Programming Interface

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

19

CryptoAPI API l mt tp hp cc lp, hm, th tc, cu trc d liu, hng s m mt chng trnh (th vin, dch v) cung cp cho cc chng trnh khc s dng Cryptographic API l... CryptoAPI (CAPI) l mt API trong h iu hnh Windows cho php cc nh lp trnh b sung tnh nng an ton cho cc ng dng chy trn Windows bng vic s dng mt m. CryptoAPI c h tr t WinNT 4.0
Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

20

CryptoAPI V mt hnh thc, CAPI l mt tp hp

cc hng s cc kiu d liu cc hm

phc v cho vic thc hin thao tc m ha, gii m, tnh gi tr bm, to ch k s, kim tra ch k s, sinh kha, lu kha, phn phi kha.
Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

21

CryptoAPI v MSDN

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

22

CryptoAPI

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

23

CryptoAPI

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

24

CryptoAPI

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

25

Cryptographic Service Provider Cryptographic Service Provider (CSP) l module phn mm ci t cc thut ton v cc chun mt m. Mi CSP thng tn ti di dng mt file .DLL

C mt s CSP i hi lm vic vi thit b phn cng lu tr kha (eToken) Trong Windows c sn nhiu CSP
Cc bn th 3 c th pht trin CSP ca mnh

Mi CSP phi c k bi Microsoft

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

26

Cryptographic Service Provider

1 2 3 4 Microsoft Base Cryptographic Provider Microsoft Strong Cryptographic Provider Microsoft Enhanced Cryptographic Provider Microsoft AES Cryptographic Provider

5
6 7 8 9

Microsoft DSS Cryptographic Provider

Microsoft Base DSS and Diffie-Hellman Cryptographic Provider Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider Microsoft DSS and Diffie-Hellman/Schannel Cryptographic Provider Microsoft RSA/Schannel Cryptographic Provider

10

Microsoft RSA Signature Cryptographic Providers

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

27

Cryptographic Service Provider

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

28

Cryptographic Service Provider

Chc nng ca CSP:

Tng tc vi cc ng dng thng qua giao din CryptoAPI Thc hin cc tnh nng an ton: sinh kha v trao i kha, m ha v gii m, bm d liu, k v kim tra ch k

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

29

Cryptographic Service Provider c trng ca CSP: Thut ton m ha/gii m c h tr Thut ton k s c h tr Ch m ha ngm nh (CBC?) Thut ton trao i kha phin di kha phin Thut ton sinh kha phin t hm bm nh dng d liu khi xut kha khi CSP
Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

30

Cryptographic Service Provider Yu cu chnh i vi CSP: Mi CSP phi ng k vi h thng (vo registry) cc thng tin v bn thn n

Mi CSP phi c k bi Microsoft (?)

Mi CSP phi xut (export) t nhtn 23 hm chun. Cc hm ny c gi bi Gateway, khng phi bi ng dng!

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

31

Cryptographic Service Provider

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

32

1
2

Tng quan v DLL ng dng mt m trong Windows CryptoAPI CryptoAPI 2.0 v CNG
Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows 33

3 4

CryptoAPI 2.0

CryptoAPI 2.0 = CryptoAPI 2 + H tr tt hn cc thao tc vi chng th s

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

34

CNG

CNG = Cryptography Next Generation API

Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

35

CNG
Bt u c h tr t Vista, Server 2008

H tr cc thut ton mt m mnh (NSA Suite B) Tch bit Key Storage Provider v Algorithm Provider
V lu di s thay th CryptoAPI
Mt m hc nng cao - Bi 1: Kin trc mt m ca Windows

36