| (I) An Internet protocol to provide data confidentiality, data
integrity, and data origin authentication for electronic mail.
[R1421, R1422]. (See: MOSS, MSP, PGP, S/MIME.)
(C) PEM encrypts messages with DES in CBC mode, provides key
distribution of DES keys by encrypting them with RSA, and signs
messages with RSA over either MD2 or MD5. To establish ownership
of public keys, PEM uses a certification hierarchy, with X.509
public-key certificates and X.509 CRLs that are signed with RSA
and MD2. (See: Pretty Good Privacy.)
(C) PEM is designed to be compatible with a wide range of key
management methods, but is limited to specifying security services
only for text messages and, like MOSS, has not been widely
implemented in the Internet.
|
