一个麻烦的领域是用于加密和身份验证的密钥的管理。
A troublesome area is the management of the keys used for encryption and authentication.
本文讨论如何获得根据主密钥在每一轮中生成子密钥的方法。
This article discusses how to get the method of generating subkey in each round according to masterkey.
清单10展示了密钥的示例。
它提供了票证和会话密钥。
密钥用于对消息签名。
这些密钥存储在密钥存储库中，由密码保护。
These keys are stored in keystores and are protected by passwords.
密钥存储库保存这些证书和密钥。
密钥存储库是存储服务器证书和密钥对的文件。
The keystore is the file in which the server's certificate and keypair are stored.
用户能够设置密钥和为EFS分配默认密钥。
Users will be able to setup keys and assign a default key for EFS.
密钥存储库是包含EFS安全信息的密钥库。
Keystore is a key repository that contains EFS security information.
准备密钥。
这一部分讨论不同类型的密钥，以及如何选择密钥的算法。
This section describes different types of keys, and how to select an algorithm for your key.
与任何密码术密钥一样，应该定期改变这些密钥。
As with any cryptographic keys, these should be changed periodically.
经过这种弱密钥处理的字节数组是一个临时密钥。
The byte array after this weak key processing is a temporary secret key.
有两种类型的密钥文件：密钥存储库和信任存储库。
There are two types of key files: key stores and trust stores.
您还可以看到，密钥密码必须设置为密钥存储密码。
You can also infer that the key password must be set to the key store password.
必须有对称密钥才能解密，而且密钥必须单独管理。
You need a symmetric key to do the encryption, and the key must be managed independently.
签名密钥是主体的私钥，检验密钥带有附加的证书。
The signing key is the private key of the subject and the verifying key has the certificates attached to the key.
密钥库管理器向导用于创建同SSL连接一起使用的密钥。
The keystore manager wizard can be used to create keys to use with SSL connections.
对于双向ssl，我们需要客户机密钥和服务器密钥。
正如我们前面所说的，密钥文件包含私钥，而信任文件包含签名密钥。
As we said earlier, the key file contains the private keys, while the trust file contains the signing keys.
它为存储中的所有密钥设置的密钥密码与密钥存储密码相同。
It sets the key password to be the same as the key store password for all keys in the store.
支持从凭证高速缓存获得的TGT的使用，支持从密钥表获得密钥的使用。
Support the use of TGTs obtained from a credentials cache and secret keys obtained from key tables.
为了完成公共-私有密钥组合，必须把公共密钥存储在目标机器上。
The public key must be stored on the target machine to complete the public-private key combination.
该文件确定了为群集所使用的认证密钥；两个节点上的密钥必须相同。
This file determines your authentication keys for the cluster; the keys must be the same on both nodes.
如果没有为实例使用ssh密钥，请先生成一个密钥对，然后再继续。
If you have no SSH key used for a secure instance, generate a key pair before you continue.
服务实现查询使用密钥查询提供者，并获得与该密钥关联的对应数据对象。
The service implementation queries the provider using the key and gets the corresponding data object associated with that key.
对于密钥，一些合理的因素是密钥版本号和密钥被添加到密钥表中的时间。
For secret keys, some reasonable factors are key version number and the time the key was added to the key table.
因为我必须用密钥作为初始矢量，所以将密钥作为初始矢量字节数组传递。
Because I have to use the key as the initial vector, I have passed the key as the initial vector byte array.
此数字签名基于公用IBM主控密钥，此密钥仅在 IBM内可用。
This signature is based on a common IBM master key, which is available only inside IBM.
应用推荐