v Subject matter – note that this sheet is based on the fourth edition of Stallings – exam will be Tuesday, May 4 in class, unless we are not in session.

v Coverage

Ø Through Thursday, April 22, 2010

Ø Chapters 15 through 20

Ø Knowledge of key distribution, authentication and encryption capabilities of your browser. You may choose which one -

v Preparation

Ø Read chapters 15 through 20

Ø Investigate your browser and do some surfing of certification authority practices

Ø Suggested problems – diagnosis is more important than exact analysis on these

§ 15.4, 15.6

§ 16.2, 16.3

§ 17.2, 17.3

§ 18.6, 18.8

§ 19.2

v Exam methodology

Ø See exam policies

Ø Open book and notes (avoids memorization)

Ø Mostly short-answer

§ What if

§ Why

§ Invent a way to do---

§ Protocol analysis and diagnosis

· Expect an essay question related to how key distribution, authentication and encryption capabilities of your browser

· SSL and https emphasis – some on e-commerce practices

· How do attacks on stored passwords (such as in Firefox or Internet Explorer) work and how do you defend against them.

Ø Learn capabilities, not forgettable details

Ø Emphasis is more on protocols and algorithm consequences than on ciphers themselves