Speaker Bio: I started working for the Department of Defense (DoD) fresh out of college as a programmer, then transitioned over into infrastructure hardware & software, and then got to work on the Computer Network Defense (CND) team. I’ve been hooked on all things security ever since. I’ve been a Security Engineer or a senior one for more than a decade now.
Synopsis: I want to speak about PKI and all the things that go along with it. I’m frequently quoted as saying PKI is easy (and I stand by that statement) it’s the ancillary stuff that we invariably struggle with. I want to dig into what TPMs, HMACs, SmartCards, and other things are and why & how they impact PKI. I want to discuss OCSP & CRLs and the advantages and disadvantages of both. I want to start the presentation by giving a primer on different kinds of encryption (namely covering symmetric vs. asymmetric) and hashing and explain how they differ. I want to cover certificate chaining & key pairs & encryption algorithms.
