R3721-F3210-F3171-HP High-End Firewalls VPN Configuration Guide-6PW101

321
Managing Public keys
NOTE:
The public key configuration is available only at the CLI.
Feature and hardware compatibility
Feature F1000-A-EI/S-EI F1000-E F5000 Firewall module
FIPS No No No Yes
Asymmetric key algorithm overview
Basic concepts
• Algorithm—A set of transformation rules for encryption and decryption.
• Plain text—Information without being encrypted.
• Cipher text—Encrypted information.
• Key—A string of characters that controls the transformation between plain text and cipher text. It is
used in both the encryption and decryption.
Key algorithm types
As shown in Figure 211, the information in plain text is encrypted by an algorithm with the help of a key
before being sent. The resulting cipher text is transmitted across the network to the receiver, where it is
decrypted by the same algorithm also with the help of a key to obtain the original plain text.
Figure 211 Encryption and decryption
The following types of key algorithms are available, based on whether the keys for encryption and
decryption are the same:
• Symmetric key algorithm—The keys for encryption and decryption are the same. Commonly used
symmetric key algorithms include Advanced Encryption Standard (AES) and Data Encryption
Standard (DES).
• Asymmetric key algorithm—The keys for encryption and decryption are different, one is the public
key, and the other is the private key. The information encrypted with the public key can only be
decrypted with the corresponding private key, and vice versa. The private key is kept secret, and the