How to use PKI encryption to share files via internet

Using PKI encryption to share files via internet

PKI keys manager - the database of public and private key pairs

Click this image to see full sized one

"The distinguishing technique used in public key-private key cryptography is use of asymmetric key algorithms because the key used to encrypt a message is not the same as the key used to decrypt it. Each user has a pair of cryptographic keys — a public key and a private key. The private key is kept secret, while the public key may be widely distributed. Messages are encrypted with the recipient's public key and can only be decrypted with the corresponding private key. The keys are related mathematically, but the private key cannot be feasibly (ie, in actual or projected practice) derived from the public key. It was the discovery of such algorithms which revolutionized the practice of cryptography beginning in the middle 1970s." Public-key cryptography . Wikipedia.

Using PKI keys in AEP PRO

AEP file encryption software has own generator of public/private key pairs. The program supports 768, 1024 and 2048 bit PKI keys.

AEP uses technology of digital envelope. It combines the reliability and speed of symmetric encryption algorithms (AES, Twofish and etc) and convenience of PKI infrastructure (RSA). The digital envelope involves transmitting a file that has been encrypted using secret key (symmetric cryptography) combined with an encrypted secret key that usually has been encrypted using Public Key (asymmetric) cryptography.

An unique feature of AEP is ability to protect use of private key by password. I.e. in other words, private key file can also be encrypted. And in case, if private key file was stolen, it cannot be used by another person because the key was encrypted using strong cryptography.

PKI key generator. Generating private and public key pair

Click this image to see full sized one

Advanced Encryption Package Professional has special tool to keep information about key files. It also can generate new key pairs, encrypt/decrypt private keys.