Title:

Horacio Moreno ITEC 5321 Spring 2006

Lab Narrative and Reflections,

Open SSL, Windows and Linux Log Analysis, Baseline System (GSEC Baseline)

 

Purpose:

The purpose of the lab is to learn how to use OpenSSL for cryptography.  The lab also aids in explaining Windows and Linux logs as well as the GSEC baseline.

 

Tools:

OpenSSL, Knoppix, Windows 2000

Open SSL Whitepaper

Lab 5A-2 Windows Log Analysis

Lab 5B-1 Linux Log Analysis

Baseline System (GSEC Baseline)

 

Procedures:

First we did some cryptography with SSL by first encrypting then decrypting a file.

 

openssl rand -out des_key 8

ls

cat des_key

 

-----------------------------------------------------

create a text file and put stuff into it

 

cat testfile

openssl des -e -kfile ces_key -in testfile -out testfile.enc

ls

cat testfile.enc

 

now decrypt it

openssl ces -d -kfile des_key -in testfile.enc -out testfile.dec

-----------------------------------------------------

 

cat testfile.dec

openssl rand -out seed 512

openssl genrsa -out private_key  -rand seed 4096

openssl ras -pubout -in key_private -out key_public

 

openssl rsautl -pubin -inkey public_key -encrypt -in testdata -out testdata.inc

 

 

We then moved on to analyzing Windows logs.

 

 

We next went over Linux log files.

 

The lab was concluded with Baseline System (GSEC Baseline).

 

Analysis:

OpenSSL facilitates cryptographic tasks such as encrypting, decrypting and managing keys.

 

Time:

About ? hours

 

Reflection:

I had no idea cryptography could be so easy.  Creating a private key was easier than I thought..