信任存储库通常仅包含公钥。
这些签名公钥被称为证书。
比较基于主机的认证和基于公钥的认证。
Comparing host-based authentication to public key-based authentication.
从每个证书中提取公钥。
创建用户网络名以及公钥和私钥对
消息的发送方使用接收方的公钥加密消息。
The sender of the message USES the recipient's public key to encrypt the message.
附录4：公钥加密术语。
接收方使用发送方的对应公钥验证数字签名。
The receiver uses the sender's corresponding public key to verify the digital signature.
公钥本身没有多大用处；您不知道它代表什么。
A public key on its own isn't much use; you don't know who it represents.
RSA公钥密码系统就是基于这种因数分解特性的。
RSA public-key cryptography is based on this property of factorization.
浏览器会保留私钥，并把公钥发送给提供商。
The browser will keep the private key while the public one is handed over to the provider.
公有密钥分布于名为公钥证书（PKC）的容器中。
Public Keys are distributed in containers called public key certificates (PKC).
有了OpenPGP，我可以通过使用公钥加密内容。
接下来，将使用Alice的公钥对数字签名进行加密。
Next the digital signature is encrypted using the public key for Alice.
消息的发送方使用接受方的公钥加密消息并发送。
The sender of the message USES the public key of the receiver to encrypt the message to be sent.
创建一个rsa密钥对，即验证使用的公钥和私钥。
Create an RSA key pair, public and private keys for authentication, by typing.
而解密方必须有权使用与用于加密消息的公钥关联的私钥。
The decrypting party must have access to the private key associated with the public key used to encrypt the message.
它包含用于加密在SSL连接上交换的数据的公钥和私钥。
It contains a public key and a private key used to encrypt the data exchanged over the SSL connection.
幸运的是，ssh支持公钥或私钥身份验证和系统别名。
Luckily, SSH supports public or private key authentication and system aliases.
您从第1部分中可以看到，这个公钥是基于rsa算法生成的。
As you saw in Part 1, this public key would be based on the RSA algorithm.
然而，公钥密码术更进一步，它引入了签名公钥的概念。
However, public key Cryptography takes things a step further and introduces the idea of signed public keys.
打开一个新Notepad文档，将公钥粘贴在其中。
Open a new document in Notepad and paste the public key into it. The key should be on a single line and start with ssh-rsa.
下面，需要复制公钥并将其安装到服务器 #1和 #2 上。
Next, we need to copy and install the public key on servers 1 and 2. Do not use ftp.
通过认证一个公钥属于一个命名的实体，数字证书解决了这个问题。
Digital certificates address this problem by certifying that a public key belongs to a named entity.
对于一对一交互，我们通常使用服务公钥来加密信息并提供机密性。
Typically for one-to-one interactions we use the service public key to encrypt information (and provide confidentiality).
在成年人的世界里，可以通过使用公钥—私钥加密来解决此类问题。
In the grown-up world, you solve these problems through the use of public key-private key encryption.
这个证书中包含身份凭证，并且具有一对与之相关联的私钥和公钥。
The certificate contains identity credentials and has a pair of private and public keys associated with it.
数字证书有两种用途：建立所有者的身份，以及让所有者公钥可用。
A digital certificate serves two purposes: it establishes the owner's identity, and it makes the owner's public key available.
如果是自签名证书，则该证书本身的公钥必须存在于信任存储区中。
In the case of a self-signed certificate, it is the certificate's own public key that must exist in the trust store.
PK i由两个密钥组成-公钥和私钥-用于认证用户和加密数据。
PKI consists of two keys — a public key and a private key — used to authenticate the user and encrypt the data.
应用推荐