Demystifying Cryptography with OpenSSL 3.0: Discover the best techniques to enhance your network security with OpenSSL 3.0

Book Description

Use OpenSSL to add security features to your application, including cryptographically strong symmetric and asymmetric encryption, digital signatures, SSL/TLS connectivity, and PKI handling

Key Features

• Secure your applications against common network security threats using OpenSSL
• Get to grips with the latest version of OpenSSL, its new features, and advantages
• Learn about PKI, cryptography, certificate authorities, and more using real-world examples

Book Description

Security and networking are essential features of software today. The modern internet is full of worms, Trojan horses, men-in-the-middle, and other threats. This is why maintaining security is more important than ever.

OpenSSL is one of the most widely used and essential open source projects on the internet for this purpose. If you are a software developer, system administrator, network security engineer, or DevOps specialist, you’ve probably stumbled upon this toolset in the past – but how do you make the most out of it? With the help of this book, you will learn the most important features of OpenSSL, and gain insight into its full potential.

This book contains step-by-step explanations of essential cryptography and network security concepts, as well as practical examples illustrating the usage of those concepts. You’ll start by learning the basics, such as how to perform symmetric encryption and calculate message digests. Next, you will discover more about cryptography: MAC and HMAC, public and private keys, and digital signatures. As you progress, you will explore best practices for using X.509 certificates, public key infrastructure, and TLS connections.

By the end of this book, you’ll be able to use the most popular features of OpenSSL, allowing you to implement cryptography and TLS in your applications and network infrastructure.

What you will learn

• Understand how to use symmetric cryptography
• Get to grips with message digests, MAC, and HMAC
• Discover asymmetric cryptography and digital signatures
• Focus on how to apply and use X.509 certificates
• Dive into TLS and its proper usage
• Manage advanced and special usages of TLS
• Find out how to run a mini certificate authority for your organization

Who this book is for

This book is for software developers, system administrators, DevOps specialists, network security engineers, and analysts, or anyone who wants to keep their applications and infrastructure secure. Software developers will learn how to use the OpenSSL library to empower their software with cryptography and TLS. DevOps professionals and sysadmins will learn how to work with cryptographic keys and certificates on the command line, and how to set up a mini-CA for their organization. A basic understanding of security and networking is required.

中文：

书名：使用OpenSSL 3.0揭开密码学的神秘面纱: 使用OpenSSL 3.0发现增强网络安全性的最佳技术

使用OpenSSL为您的应用程序添加安全功能，包括加密强对称和非对称加密、数字签名、SSL/TLS连接和PKI处理

主要功能

• 使用OpenSSL保护应用免受常见网络安全威胁
• 掌握最新版本的OpenSSL、新功能和优势
• 了解PKI、密码学、证书颁发机构等真实示例

图书描述

安全性和网络是当今软件的基本特征。现代互联网充满了蠕虫，特洛伊木马，中间人和其他威胁。这就是为什么维护安全比以往任何时候都更加重要。

为此，OpenSSL是internet上使用最广泛且必不可少的开源项目之一。如果您是软件开发人员，系统管理员，网络安全工程师或DevOps专家，那么您过去可能会偶然发现此工具集-但是如何充分利用它呢？借助本书，您将了解OpenSSL最重要的功能，并深入了解其全部潜力。

本书包含对基本密码学和网络安全概念的逐步解释，以及说明这些概念用法的实际示例。您将从学习基础知识开始，例如如何执行对称加密和计算消息摘要。接下来，您将发现有关密码学的更多信息: MAC和HMAC，公钥和私钥以及数字签名。随着您的进展，您将探索使用X.509证书、公钥基础结构和TLS连接的最佳实践。

到本书结束时，您将能够使用OpenSSL最受欢迎的功能，使您可以在应用程序和网络基础结构中实现密码学和TLS。

什么你会学到

• 了解如何使用对称密码
• 掌握消息摘要、MAC和HMAC
• 发现非对称密码学和数字签名
• 关注如何申请和使用X.509证书
• 深入TLS及其正确使用
• TLS高级和特殊用途管理
• 了解如何为您的组织运行迷你证书颁发机构

这本书是为谁准备的

本书面向软件开发人员、系统管理员、DevOps专家、网络安全工程师和分析师，或者任何想要保持其应用程序和基础架构安全的人。软件开发人员将学习如何使用OpenSSL库为他们的软件提供密码学和TLS。DevOps专业人员和系统管理员将学习如何在命令行上使用加密密钥和证书，以及如何为其组织设置mini-CA。需要对安全性和网络有基本的了解。