6.0 Cryptography

6.3 Given a scenario, use appropriate PKI, certificate management and associated components.

• Certificate authorities and digital certificates
  
  
  • CA
    
    
  • CRLs
    
    
  • OCSP
    
    

    The Online Certificate Status Protocol (OCSP) is an Internet protocol used for obtaining the revocation status of an X.509 digital certificate. It is described in RFC 6960 and is on the Internet standards track.

    • RFC 6960 - Online Certificate Status Protocol - OCSP
    • More From Wikipedia
    
    
    
  • CSR
    
    
• PKI
  
  

  PKI (Public Key Infrastructure) is a set of roles, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates and manage public-key encryption.

  • More From Wikipedia
  
  
  
• Recovery agent
  
  
• Public key
  
  
• Private keys
  
  
• Registration
  
  
• Key escrow
  
  
• Trust models