Anuket Project

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 2 Next »

What:

Dovetail will provide a optional parameter "-e" ("–encrypt") for user to encrypt the test report.

With this parameter, dovetail will generate a report in cipher-text and a secret key in cipher-text together instead of a single plain-text report.

Why:

The report in plain-text is vulnerable from malicious attacks.

If user want to secure their report and do not want the report be peeked at by any unexpected person,they can simply add this parameter into the command line.

Users do not need to know or learn any details about that how to encrypt.

How:

First make sure you get a RSA public key from whom will receive your report, may be it is a 3rd party certification authority.

The whole encryption and decryption workflow show as following:

  1. dovetail generate a report and a random secret key
  2. encrypt this report with this secret key by AES256 encryption algorithm
  3. encrypt this secret key with RSA public key by RSA encryption algorithm
  4. send encrypted report and secret key to your target receiver
  5. the receiver decrypt the secret key with his own RSA private key to get original secret key
  6. then receiver decrypt the report with this secret key to get the plain-text report

  • No labels