Glossary
CA Certificate Authority, the entity which issues digital certificates for use by
other parties.
DH Group A number that determines the public parameters used by the Diffie-Hellman
key exchange. To successfully establish a shared secret key, both parties
must use the same DH group.
Diffie -Hellman key
exchange
A key agreement algorithm based on the use of two public parameters p
and g that may be used by all users in a system. Parameter p is a prime
number and parameter g (usually called a generator) is an integer less than
p.
Digital Certificate The digital equivalent of an ID card used in conjunction with a public key
encryption system. Digital certificates are issued by a trusted third party
known as a “Certificate Authority” (CA) such as VeriSign
(www.verisign.com). The CA verifies that a public key belongs to a specific
company or individual (the “Subject”
), and the validation process the public
key goes through to determine if the claim of the subject is correct and
depends on the level of certification and the CA.
Digital Signature A digital signature is an encrypted digest of the file being signed. The file
can be a message, a document, or a driver program. The digest is
computed from the contents of the file by a one-way hash function such as
MD5 or SHA-1 and then encrypted with the private part of a public or
private key pair. To prove that the file was not tampered with, the recipient
uses the public key to decrypt the signature back into the original digest,
recomputes a new digest from the transmitted file and compares the two to
see if they match. If they do, the file has not been altered in transit by an
attacker.
HTTP Hypertext Transfer Protocol, used to request and transmit pages on the
World Wide Web.
HTTPS A secure version of HTTP.
IETF Internet Engineering Task Force, the organization that produces standards
for communications on the Internet.
60 VPN Setup Guide for 9600 Series IP Telephones March 2015
Comments? infodev@avaya.com