???????? ????????????? ??????????? ???????? ???????.???????? ???????? ??????????? ?????????????? ???????????? ? ?????????????? ?????????????? ???????? ??????. ??????????? ??????????????? ?????? ?? ???? ??????-??? CSP. ????????????? ??? ??? ???????????

1
???????? ????????????? ??????????? ????????
???????.???????? ???????? ???????????
?????????????? ???????????? ? ??????????????
?????????????? ???????? ??????. ???????????
??????????????? ?????? ?? ???? ??????-??? CSP.
????????????? ??? ??? ??????????? ???????????
???????????? ????????????????.
???????? ?.?., ?????? ?.?., ?????? ?.?., ???????
?.?
2
???? ????????????????? ??????

• ?????????????? ?????????????
• ??????????? ??????? ? ????????
• ?????????????????? ??????????
• ??????????? ??????????
• ????????????? ?????? ?? ??????????? ????????

3
????????????? ?????????? ??????????

• ????????????
• (? ?????????, ?????? ??????, ????????????,
  single-key).

• ?????????????
• (? ???????? ??????, public-key)

4
????????? ???????? ??? ?????????
5
?????????? ????????? ?????
?????????? ???????????? ????? ????????,
?????????????? ?????????????? ????????? ????? ?
?????????????? ????????? ????????? ???????????,
???????? ? ?????????? ?????????????? ???????.
?????? 3 ??? ???????????? CRU, orgACME,
cnUserName ??? ???????? CRU, orgACME,
cnCA ????? ??????????? 12345678 ???????? ???
GOST R 34.11-94/ R 34.10-94 (1.2.643.2.2.4) ??????
?? ???? ???????????? ???????? ????? GOST R
34.10-94 (1.2.643.2.2.20) ???????? ?????
010011101001001010010101 ?????????? ????????? ?
01.01.2001 000000 ?????????? ????????? ??
31.12.2006 2359.59 ?????????????? ??????????
(X.509 v3 Extensions) ????????? ?????????????
??????????? ?????????? ACME ????????? ????
????????? ? 31.12.1999 2359.59 ?????????
???? ????????? ?? 31.12.2000 2359.59
??????? ?????????? ????? ?????? ?????
(1.3.6.1.5.5.7.3.4) ??????? ?????????? ?????
?????????????? ??????? (1.3.6.1.5.5.7.3.2)
???????? ???????????? IP, DNS, URI, RFC822,
?????,... . . . ??????? ?????? ????????????
???????? GOST R 34.11-94/ R 34.10-94
(1.2.643.2.2.4) ???????? 01001110100100101001010
1
RFC 2459, X.509 Certificate SEQUENCE
tbsCertificate TBSCertificate,
signatureAlgorithm AlgorithmIdentifier,
signatureValue BIT STRING
TBSCertificate SEQUENCE version
0 EXPLICIT Version DEFAULT v1,
serialNumber CertificateSerialNumber,
signature AlgorithmIdentifier,
issuer Name, validity
Validity, subject
Name, subjectPublicKeyInfo
SubjectPublicKeyInfo, issuerUniqueID 1
IMPLICIT UniqueIdentifier OPTIONAL,
-- If present, version shall be
v2 or v3 subjectUniqueID 2 IMPLICIT
UniqueIdentifier OPTIONAL,
-- If present, version shall be v2 or v3
extensions 3 EXPLICIT Extensions
OPTIONAL -- If
present, version shall be v3
6
?????????????? PKI

• ????????? ???????????

• ?????????? ??????????? ?????

• ?????? ?????????? ? ?????????

• ???????? ?? (Authenticode)

7
???????? ???????????
?
8
????????? ??????????????? ??????
??????
9
?????? ???????????? Microsoft

• ????? ???????????? (Certification Authority)
• ?????? ???????????? ????????
• ????????? ??????, ???? ?????
• ????? ????????????
• ?????????? ?????? ?????? ????????????
  (Certificate Revocation List)
• ???????? ??????? ???? ???????? ????????????
• Web-?????? (Web Enrollment Support)
• ?????? ? ????????? ??????????? ????? Web-?????????

?????????? ?????????? ?????????????
????????????????
?????????? ?????????????? ???????????? ???
??????? ? ?????? ????????????
????????? ????????????????
10
???? CryptoPro CSP

• ????????? ???????????? ??????????? ??????????
  ????? Microsoft ? ???????? ??????????
  ?????????????

• ????????? ????????? ?????, ??????? ??????????
  ?????????? ? ?????????????? ??????????????
  ?????????? ????? Microsoft

11
??????????? ????????????????? ??????? Windows
????????? CryptoAPI 2.0
12
???? ?????????? CryptoAPI
?????? ????????? ??????? ? ?????????????????
???????? ????????? ??????, ????????????/????????
??????????? ???????? ???????, ??????????/?????????
???? ??????. ?? ????????? ?????????? ????????
???????????? ?????????? ???? ??? ????? ?????????
??? ????????? ???? ? ??????????? ?? ?????????. 
???????????? ??????????? ?????? ??
????????????????? ??????? ????????? ????????????
???????????? ?????? ????????? ? ?????????
?????????? ???? ??????????, ??????? ??????????.
13
????????? CryptoAPI 2.0
??????? ?????? ?? ?????????????
????????????Certificate Store
??????????????? ??????? ?????????
????????????????? ?????????Simplified Message
Functions
?????????????? ??????? ?????????
????????????????? ?????????Low Level Message
Functions
??????? ????????????????????????CryptEncodeObjec
tCryptDecodeObject
??????? ??????? Base Cryptography Functions
Cryptographic Service Providers
14
Cryptographic Service Providers
Crypto-Pro Cryptographic Service Provider
Crypto-Pro GOST R 34.10-2001 Cryptographic
Service Provider
15
????????? CSP
???????????? ??????? Windows 95, Windows 95
OSR2, Windows 98, Windows 98 SE, Windows ME,
Windows NT, Windows 2000, Windows XP, Windows
Whistler (beta 2).
16
???????? ???????

• ????????? ????????? (256 ???) ? ???????? (1024
  ????) ?????? ??? ? ??????????
• ??????????? ????????? ?????? ? ??????????
  ??????????? ? ???????????? ? ???? ? 34.10-94
  ("?????????????? ??????????. ?????????????????
  ?????? ??????????. ??????? ??????????? ????????
  ??????? ?? ???? ?????????????? ??????????????????
  ?????????.")
• ??????????? ?????? ? ???????????? ? ???? ?
  34.11-94 ("?????????????? ??????????.
  ????????????????? ?????? ??????????. ???????
  ???????????.")
• ???????????? ??????????? ???????? ??????? ?
  ???????????? ? ???? ? 34.10-94 (???? ?
  34.10-01)
• ?????????? ?????? ?? ???? ???????, ????????????
  ???? 28147-89 ("??????? ????????? ??????????.
  ?????? ?????????????????.")
• ??????????? ?????? ? ???????????? ? ????
  28147-89
• ????????????? ?????? (???-????) ???
  ?????????????? ?????? ???????? ??????????.

17
???????? ????????

• ??????? 3,5"
• ?????????? ???????????????? ????? (???) ?
  ???????????? ????? MPCOS-EMV
• ???????? Touch-Memory DS1993 - DS1996 ?
  ?????????????? ????????? ?????? 4, ???????????
  ????? "??????" ??? ?????????? ?????? ????????
  Touch-Memory DALLAS
• ?????? Windows
• USB ???? eToken.

• ??????????
• ???? ????????? CSP ????? ??????????????? ? ????
  ???????
• ? ?????? ??????????.
• ? ?????? ???????? ??????, ??????? ??????????? ?
  ???? ?????????? ??????? Windows.

18
?????????????? ?????
???? - ?????? ???????????? Microsoft

• ???????? ???????
• ??????????? ?????????????
• ???????????? ???????????? ???????? ??????
• ??????? ??????? ???????????? ???????? ??????
• ?????????? ????????????? ???????? ??????
• ?????????????? ?????????? ???????????? ???????
  ????????? ?????? ? ?????????? ???????
  ?????????????
• ????????????
• ???????????????? ?????????? ???????? ???????????
• ?????????????? ?????????? ???????? ???????????
• ?????? ???????????? ?? ???????? ???????

19
??????????? ??
20
??? ??????????????

• ???????? ???????
• ??????????? ?????????????
• ?????????? ??????????, ????????? ? ??????????
  ????????????
• ?????????? ???????????? ????????, ????????? ?
  ??????? ???????????? ? ??????????? ??????
  ?????????? ????????????
• ????? ?????? ?????? ???????????

21
??????????? ?????????????
22
??????????? ?????
MS Outlook (98, 2000, ?P) MS Outlook
ExpressThe BAT!
23
???????? ?? (Authenticode)
24
?????? ?????????? ? ?????????
TLS 1.0
25
??????????
CryptoAPI 2.0 ????????? CSP
26
?????????? ?????????? ??????????
27
????????????? ????????? CSP ? Outlook Express
28
???????? ?????????????? ??????? ??? ?????
???????? ??
29
????????? ?????????? ???????????
SOAP TLS 1.0
????????????????????( SOAP, TLS 1.0)
30
????????? ???????? ???????????
SOAP TLS 1.0
HTTP/S TLS 1.0
????????????????????( SOAP, TLS 1.0)
31
????? ???????????