Cryptography and Security - Assignment 2: Digital Certificates and Public Key Infrastructure

CSC8419
Cryptography and Security
Assignment 2

Task 1
The files can be downloaded from the link: https://goo.gl/8CNeyc . For completing
this, the ISO file and its signature file for MD5 are implemented
 Firstly, we've listed the files present in the directory to confirm if
everything is correct.
 Secondly, we will check for the correctness of the signatures with the
help of GNU Privacy Guard (gpg) for MD5:
When this command is used for the very first time, it may happen that
our system does not have the public key, so we'll use the command ID =
‘6294BE9B’ to retrieve public key.
 Thirdly, using the the ID = ‘6294BE9B’, we'll download public key
from the server, Debian keyring.

 Then, Verification is done of both the signatures files.
The authentication of the Debian DVD image is confirmed by the line
“Good signature from "Debian CD signing key <debian-
[e-mail]>”. The generated fingerprint key: DF9B 9C49 EAA9
2984 3258 9D76 DA87 E80D 6294 BE9B can also be used and then compared
with the ones present in the link https://www.debian.org/CD/verify. The
comparison will conclude that this matches with the fingerprint key.
 The content of the ISO image can be confirmed to check if the checksum
of the ISO image matches with those of the expected checksum files.