Please enable JavaScript.
Coggle requires JavaScript to display documents.
(E-Mail Security – PGP & S/MIME) - Coggle Diagram
E-Mail Security – PGP & S/MIME
🌐 Introduction to E-Mail Security
❓ Why it's needed
⚠️ Threats
Phishing
Spoofing
Eavesdropping
🛡️ Goals of Security
Confidentiality
Integrity
Authentication
Non-repudiation
🔐 Pretty Good Privacy (PGP)
👤 Developed by: Phil Zimmermann
🔄 How it works (Flow)
User composes message
Message hashed using SHA-1
Encrypted with symmetric key (AES/IDEA)
Symmetric key encrypted with recipient’s public key (RSA/DSA)
Digital signature added
🧱 Key Components (Tree)
🗝️ Public & Private Keys
💍 Key Rings
Public Key Ring
Private Key Ring
✍️ Digital Signature
✅ Advantages
Strong security
Open-source
❌ Limitations
Complex key management
Not supported by all mail systems
🛡️ S/MIME (Secure/Multipurpose Internet Mail Extensions)
💡 Based on MIME standard
🏛️ Uses X.509 certificates (PKI)
🔄 How it works (Flow)
Message composed
Signed with sender’s private key
Encrypted using recipient’s public key
Sent and decrypted by recipient
🧱 Key Components (Tree)
🔐 Public & Private Keys
🏛️ Certificate Authority (CA)
📄 Digital Certificate
✅ Advantages
Easy to use
Supported by most enterprise email clients
❌ Limitations
Centralized trust model (CA)
Can be expensive
⚖️ PGP vs. S/MIME (Comparison Tree)
🔑 Key Management
PGP: Web of Trust
S/MIME: Centralized CA
📲 Usability
PGP: Manual and user-dependent
S/MIME: Seamless integration
🌍 Adoption
PGP: Open-source users
S/MIME: Corporates and businesses
🧪 Algorithms
PGP: RSA/DSA + AES + SHA
S/MIME: RSA + SHA + X.509
📚 References
William Stallings –
Cryptography and Network Security
Jonathan Rosenoer –
Cyber Law: The Law of Internet
John W Ritting House –
Cyber Security Operations Handbook