What happens when a key expires ?
- 2 Answers
- 4100 Views
- TCS, I also Faced
- E-Mail Answers
Answers were Sorted based on User's Feedback
Answer / dalgin augustinr
Its possible to renew the key. For that agsin we have to
contact the CA which provide the key pair
| Is This Answer Correct ? | 2 Yes | 0 No |
Answer / ramkumar
In order to guard against a long-term cryptanalytic attack,
every key must have an expiration date after which it is no
longer valid (see Question 4.1.2.3). The time to expiration
must therefore be much shorter than the expected time for
cryptanalysis. That is, the key length must be long enough
to make the chances of cryptanalysis before key expiration
extremely small. The validity period for a key pair may
also depend on the circumstances in which the key is used.
The appropriate key size is determined by the validity
period, together with the value of the information
protected by the key and the estimated strength of an
expected attacker. In a certificate (see Question
4.1.3.10), the expiration date of a key is typically the
same as the expiration date of the certificate, though it
need not be.
A signature verification program should check for
expiration and should not accept a message signed with an
expired key. This means that when one's own key expires,
everything signed with it will no longer be considered
valid. Of course, there will be cases in which it is
important that a signed document be considered valid for a
much longer period of time. Question 7.11 discusses digital
timestamping as a way to achieve this.
After expiration, the old key should be destroyed to
preserve the security of old messages (note, however, that
an expired key may need to be retained for some period in
order to decrypt messages that are still outstanding but
encrypted before the key's expiration). At this point, the
user should typically choose a new key, which should be
longer than the old key to reflect both the performance
increase of computer hardware and any recent improvements
in factoring algorithms (see Question 4.1.2.1 for recent
key length recommendations).
However, if a key is sufficiently long and has not been
compromised, the user can continue to use the same key. In
this case, the certifying authority would issue a new
certificate for the same key, and all new signatures would
point to the new certificate instead of the old. However,
the fact that computer hardware continues to improve makes
it prudent to replace expired keys with newer, longer keys
every few years. Key replacement enables one to take
advantage of any hardware improvements to increase the
security of the cryptosystem. Faster hardware has the
effect of increasing security, perhaps vastly, but only if
key lengths are increased regularly (see Question 2.3.5).
| Is This Answer Correct ? | 1 Yes | 0 No |
What is a zed encoder? How does it work?
Do digital signatures help detect altered documents and transmission errors?
What is the difference between a message authentication code (MAC) and a one-way hash?
What is multiple encryption?
Is there a limit on the file size or on the number of encrypted files?
What if a certifying authority?s key is lost or compromised ?
Does encryption of connection strings in web.config file possible? How?
What is secret-key cryptography ?
A company wants to transmit data over the telephone, but it is concerned that its phones may be tapped. All of its data is transmitted as four-digit integers. It has asked you to write a program that will encrypt its data so that the data may be transmitted more securely. Your script should read a four digit integer entered by the user in a prompt dialog and encrypt it as follows: Replace each digit by (the sum of that digit plus 7) modulus 10. Then swap the first digit with the third, and swap the second digit with the fourth. Then output XHTML text that displays the encrypted integer.
What is are "proprietary" and "public" cryptographic algorithms?
What are the disadvantages of public-key cryptography compared with secret-key cryptography?
How to remove the Kryptel (Silver Key) icon from the desktop?
Cryptography Algorithms 
