SHA-2 在互联网安全中的作用是什么?
我正在读一些轻松有趣的书,我想得到一些澄清,请。
我知道 SSL 使用公钥加密技术,是 HTTPS 连接背后的支柱。 SSL 中使用的加密可以是 AES-128、256 或其他。 SHA 在安全连接中扮演什么角色?如果连接是安全的,并使用 AES 加密,那么 SHA 会在哪里发挥作用?
I'm doing some light and fun reading and I'd like to get some clarification, please.
I know that SSL uses public-key cryptography and is the backbone behind the HTTPS connection. The encryption used in SSL can be AES-128, 256, or whatever. What part of the secure connection does SHA play in security? If the connection is secured, and encrypted with AES, where does SHA come into play?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
SHA 是一种哈希函数。
哈希函数与加密无关。它们用于数字签名和消息完整性。
例如,在证书中,有公钥,但也有哈希值以确保证书未被更改
SHA is a hash function.
Hash functions have nothing to do with encryption. They are used in digital signing and message integrity.
For example in certificates, there is the public key but there is also the hash to ensure that the certificate has not been altered
除了在另一位发帖人提到的证书中使用之外,在 SSL/TLS 中,加密哈希还用于构造消息身份验证代码 (MAC) 使用 HMAC 结构。这是为了确保流不被攻击者修改,并拒绝攻击者修改的 PDU。
Beside their use in certificates mentioned by another poster, in SSL/TLS cryptographic hashs are used to contruct Message Authentication Code (MAC) using the HMAC construction. This is to ensure that the stream is not modified by an attacker, and to reject PDUs that are.