SELF要求各节点每经过一个规定的时间间隔，就更新一次节点的身份密钥和节点间的邻居密钥，并将原密钥作废。
SELF required each node update the identity key of the node and the neighbor key between nodes and invalidate the old keys at given intervals.
一个麻烦的领域是用于加密和身份验证的密钥的管理。
A troublesome area is the management of the keys used for encryption and authentication.
用户向安全服务器提供一个秘密密钥（密码）来证明其身份。
The user supplies a secret key (password) to the security server to prove its identity.
这样，服务器将得到客户端的身份和会话密钥。
This way the server gets the identity of the client and the session key.
一旦安全服务器通过秘密密钥确认了用户的身份，用户登录到DCE的过程就完成了。
Once the security server confirms the identity of the user via secret key, the login process of the user into the DCE is completed.
目标服务器将使用此会话密钥来确认客户端的身份。
This session key will be used by the target server to confirm the identity of the client.
为了帮助验证身份，SSH有一个密钥管理功能和相关的代理。
To help validate identities, SSH has a key management capacity and related agents.
该身份可以用接收方的名字、接收方的公用密钥证书或以其它方式来表示。
The identity may be represented as the name of the recipient, the public key certificate of the recipient, or in some other way.
该TGT包含客户端的身份、一个随机生成的TGT会话密钥和TGT的有效期。
The TGT contains the identity of the client, a randomly generated TGT session key and the lifetime of the TGT.
私有ssh密钥是用于出站ssh连接的用户身份，且应当保密。
The private SSH key is the user's identity for outbound SSH connections and should be kept confidential.
STkt响应消息包含在客户端与目标服务器之间使用的会话密钥，还包含客户端的身份。
The STkt response message includes first the session key for use between the client and targeted server and then also the identity of the client.
身份验证服务获取PSTkt请求，使用其秘密密钥解密它。
The authentication service gets the PSTkt request and decrypts it using its secret key.
然后可以使用这个密钥对通过加密来利用数字身份安全地交换文本。
This digital identity can then be used to exchange text securely by encryption using the key pair.
身份验证服务的总体目标是，与客户端希望向其进行身份验证的服务器安全地交换客户端身份和会话密钥。
The whole purpose of the authentication service is to securely exchange the client identity and session key to the server to which the client wants to authenticate.
现在，客户端拥有了会话密钥，它可以使用该密钥向身份验证服务验证自身。
At this point, client has the session key that client can use for authenticating itself to the authentication service.
这个密钥由身份验证服务生成，由客户端和身份验证服务共同用于所有未来通信。
This key is generated by the authentication service and is Shared between the client and the authentication service for all future communications.
另一个麻烦的领域是用于进行加密和身份验证的密钥的管理。
Another troublesome area is the management of the keys used for encryption and authentication.
这些运行时环境应该配置为使用全局安全性，而且应该配置为通过相同LTPA密钥进行LTPA身份验证。
These runtime environments should be configured to use global security, and they should be configured to use LTPA authentication with the same LTPA key.
客户端使用它的秘密密钥解密来自身份验证服务的消息。
The client decrypts the message from the authentication service using client secret key.
确切地说，在上面的示例中，就是用来签名HTTP请求中订单的专用密钥应该与用于SSL客户机身份验证的密钥相同。
Specifically, in the above example, the private key used to sign the order in the HTTP request should be the same as the one for the SSL client authentication.
当配置为公钥身份验证时，您的密钥证明您在远程ssh主机上的身份。
When configured with public key authentication, your key proves your identity to remote SSH hosts.
即使用户采用公共密钥或基于主机的身份验证，也会执行这个密码检查。
This password check is done even if the user is following the public key or host-based authentication.
在此身份验证信息交换过程中生成的会话密钥可用于客户端/服务器与KDC之间的所有未来通信。
The session keys generated during this authentication exchange can be used for all the future correspondences among client/server and KDC.
在以这种方式使用时，尽管SSH仍然提供二元身份验证，但是SSH密钥不足以识别访问云实例的用户的身份。
However, while SSH still provides two-factor authentication, when used this way it is not sufficient to identify the individuals who are accessing the cloud instances.
通常，存储在此类条目中的密钥是对对应的公钥进行身份验证的证书链所附带的私钥。
Typically, a key stored in this type of entry is a private key accompanied by the certificate chain authenticating the corresponding public key.
可信主机身份验证和公私ssh密钥对身份验证方法是类似的，在很大程度上实现相同的结果。
The trusted-host authentication and public-private SSH key pair authentication methods are similar and to a greater end achieve the same results.
传输层负责密钥交换和服务器身份验证。
The transport layer is responsible for key exchange and server authentication.
TGT包含供在客户端与身份验证服务之间使用的会话密钥。
TGT carries session key for use between the client and authentication service.
同样地，用来在HTTP响应中签名收据的专用密钥也应与用于SSL服务器身份验证的密钥相同。
Similarly, the private key used to sign the receipt in the HTTP response should be the same as the one for the SSL server authentication.
整个TGT 使用身份验证服务的秘密密钥加密。
The entire TGT is encrypted with the secret key of authentication service.
应用推荐