• No results found

A critical view on Public Key Infrastructures

N/A
N/A
Protected

Academic year: 2022

Share "A critical view on Public Key Infrastructures"

Copied!
90
0
0

Laster.... (Se fulltekst nå)

Fulltekst

(1)

B E R G E NS IS U N IVE RSIT A

S

(2)
(3)

! "

#!"$%

&

'!$% !

"

' ($ )* +

!

(4)
(5)

.

, /! 0

- 1

2 3 /)4 ,

5 2

, /6/ 7

, / ! 7

, , /6/ .

, - # /6/ ,8

, 2 3 ,8

,, /)4914 ,

,, : ,

,,, /)4914 ; ,-

,,- /)4914 ,7

,,2 # /)4914 ,7

,,5 3 ,.

,- &580 ,<

,- : ,0

,-, = ; &580 ,0

,-- &580 -7

,-2 # &580 -<

,-5 3 -<

,2 = /)4 28

- 3# 2,

- 1 3# 2-

- , 3# ! 2-

(6)

- 2 3 22

-, = 1 25

-, 3 2.

-- >3/ 2.

-- 3 2< -2 20

-2 3 58

-5 1 58

! " " # $ % "& 5 /? 5< 5 50

5 , @ 78 5 - 3 7

5, /? 7-

5, 3 72

' # ( 7 3 93 77

7, " .8

7- " /4: .,

72 1 ! .7

72 # ! .7

72, 4 .< 72- ' .0

75 3 <8

) $ &

(7)

+ ! 4 !

!! /

A

4!

$

+ ! =

4 !

+

! ! ! !

! 4

*

!

B

B 4

! B *

B > !

B

!$

C7.DE

!

+ FG +

(8)

F G

+ !

!

H

!

! !

!

+

; H

! 6

= /! ) 4 F/)4G

E 4

/)4 E

4 /)4 !

/)4

=! ! H

/)4 = /)4 !I

; /)4

" /)4

!

= /)4

/)4 /)4

E ' ? " #=

/)4 /)4 E /6/ /)4914

(9)

/6/

/6/

/6/ !

/)4914 F /! ) 4 9 1 !

4 G ; ;

! ! 4

!

! &580 /)4

$ /)4 !

&580 !

/)4 !

+ 4 4

&580 ;

/)4914 ;

= ! /)4 4

F/ ?H

F/?GG ! H

/)4 ! 4 4

!

# !

J

/)4

++ / !

+ F G F

G 4

4 4

!

H

9

= /)4 4

+ /)4 "

! :

K /)4

; H

"L =

! H

(10)

J 0.8 !

+ 4

+ H

+ !

3

!

4 0.7 1A !

; K!

! !

K ! !

!

! !!

= L ! !

! !

! ! !

!

= !

!

C 8D (

+ !

= ! !

! * H

! L !

/

!

/! !

4

! " !

#

"!

(11)

Ciphertext Decrypt

Encrypt Ciphertext

Plaintext

Plaintext

Encryption

Decryption

Key

Key

Recipient’s Public Key

Recipient’s Private Key

( E /!

H

K

4 !

! !

,K

= !

! =

!

! ! L

= = !

= =

=

= + "!

(12)

+

! !

!

! ! /!

!;

1A L !

!

A ! ! *!

!! ?

! "! !

! ! J ! "! ?

"!

"! ! >

! 1A L !

! ?

/! ( F ! G K

! ! =

!

4 0.< )

+ ! 4 ! !

! /! ( )

!

C D

! /! (

!

C70D

, ! ! !

* !E ! F+

&580 /6/ G ; F +H

&580 ! G ; !F+

/)4914 ; G

(13)

Authorization certificate

Authorization Public key

Identifier

certificate

Name certificate Attribute

( ,E 3

=/!)4 F/)4G

! ! 4

4 /)4

/)4

/)4 E H

! !

"!

= "!L !

= "!

?

!! !

! !

! /)4

!

+

!!

/)4 ! /)4

! : H

(14)

=

4

! !

= ! + H

/

(

! K H

+ !

!

! 1K /)4 K KH

!

&580 ! +! ; 4

!

4 /)4914

! ! = /)4914 ; H

! ; ! ! ;

/)4 ! ! =

F ; G !

!$ /)4 4

4 !

* B 1 /)4 !

/)4

! 3 /)4

! !

E

/)4 B > ! B 1

+ B =

! B

B

B *

B 4 H

! !

! E &588

(15)

! B

H

+ !

1

B 4 !

B

/)4 B 4 /)4 H

! A

!H H !

!

?

!

!

! 4 !

! " !

E

3 ,! /)4E /6/ /)4914 &580

3 -! 3# F3H

# G = 1 >3/

F> 3 / G

3 2!

9

3 5 K H

! 3 H

H

(16)

3 7 K /)4" 4

;

=! !!

: :! F:G = K

! " H

3 . !

(17)

4 4 /)4E /6/ /)4914 &580

/)4 ! /)4

( /)4914

&580 4 ;

!

/ 6 / F/6/G C 8D ! /

M 00 /6/ H

? /6/ !

L !

K H

K =

!

=

)41 +! 72

! ! !!

! ! "!

$!% & $!% '()$!% *

! "$!% '() "&

! +'(),+-+)

& "* &

(18)

=L !

)41 = )41 !

41 L ! H

! 6 41 K

! ! L

9

= L ! !

! !

+

/6/L /6/

L !

9 ( + =

"!L ! 3

"! "! 3

"!L 3 =

;=L "!L!

! 3

43

"!L "!

3 "!L

/6/ K E

! ! !

41 ! ! ! ? H

! ! 41

!

(19)

= K

= ! /6/ F !

, G = @! K

E

*

+ # %,#

!

72 !

!

! ! !

H

?

9

4 /6/ H

! , E > /6/

+ /6/

! K

E !

!! 41 ! !

!

/6/

! E !!

(20)

+ L!

C7 D

/6/L! L

! K K

!

!

"! /6/ ( "!

! E

/6/ !

4"! !

> "!

, * ! H

( /6/ "!L !

6

4

- !

/6/ ! ?

!

H

= ! H

> !

F G H

/ /6/ !

H ( /6/

!

!

(21)

/6/ ! =

+ 9

=

4 /6/

9 > +

!

*

+ /6/

! +

!

! /6/ /6/

K !

/6/

+ J

!

/6/

! = = "! "

= /6/ H

4 !

$ F ! G

! H

K

/6/ !

> !

!! (

4

! >

(22)

? !

/6/ C7 D =

!

! =

" 3 = 3 !

! !

9

/6/

! H

! + H

H = ! !

/6/ !

"

/)4914

$ /)4 14 /)4 C2D F /! ) 4H

G$ @+! ; *

14 C5DF1 ! 4 G /)4914

!

= /)4914 ! H

!9 = ! F

G

! A ! !

/)4914 !! !

! !

! !

F " G = H

! FN! ON OG

!$ !

9 ;

! = !

(23)

/)4914

!

C7,D ! ,, +

! -

+ # %,#

! H

1

!

1

!$ !

! H

H

F ,G

,

! ,,E 3 /)4914

!

!

C7D ( , +

P

,

P

(, E = +

4 "! E

! E P

= "!L !

P "!L

+ 3P

= 3P

(24)

P

P

: P

"!

! P

= /)4914

= ;! !

L ! !

+E

!

"!F"G! E =

! ! !

!L 4 !

! ! !

! >

=3

F=3 G 4 ! A

! ;

+ =3

!"#$!%!# &

= /)4914 # ! ;

L !$ ;

! !

= ;

P

! ,- + K

=/)4914 =3

$ E !$ !

/)4914 ; > H

! 4 =3 !

F + ! G

=3

=3 ;

/)4914 ; B ! !

+ =

!$ + ! = ! H

; F! G !

L ; +

! ! +

! (

(25)

+ # %,#

! H

# F G

;H

!$ !

!

?+ ;

!

="! !

4 !$

H

; !

! ,-E > /)4914 ;

!$ ! !

; !

= ; =

=3 !$

4 "! =L

!

"! =L!

=L !

, = ; H

4 = E =3

! ; H

= "!

; "! ;

! L =3

4 "!L! =3

(26)

"!

! "!L !

- "! +!

C.D H

E 8H

"! ;

? (

? (

"!L! * H

!$ ;

!

=3 F %&'

H G

; "!

=

2 = "!L !

; H

; =

"! !

;

"!

4 ; /)4914

!

" = !$ ! ;

F

/6/L ! G

= + ( )

!

= ! A

! =

K ! K !$

! + /)4914 ; !

!

(27)

? /)4914 3=

; :

! L

!$ ! :

! J

;

/)4914

! !

"! ; =

! ! "! =

; ! =

! !

= ; F !

G 3 1 1 !

"!L

"! = 3

!"#$!%!#

/)4914 H

+ /)4914 H

E Q + /Q C0D

!

/)4914 9

= 9

;

+ !

! !

L

B /)4914

! 4

! 4

/)4914 " F"G )

3= F)3=GC0D ! 4

Q Q ! " !

(28)

Q C0D ! !

!

! !

'

/)4914

; 4 H

!

= !

L !

; ! 9 4

/)4914 !

/)4914 ; !

!

4

!

;

! ; H

L = =3 !

;

K

/)4914 H

! 6 !

!B 4 +

! >!H

F!G !

B / ! !

!

!

! A !

! FG

A 4

/)4914 ! H

+

(29)

>

!

=! /)4914

> +

!

! !

/)4914

!$

+ ! !

! +

= ! /)4914

4

;

!!

; !

!! ! ! ; =

! ! "

/)4914

F 00<G !

! &580

#$%

&580 C D !

! ! ! 4JH ;

4J F4 JG &580

4 +H

E 4? F94?G 4/

F G9 F G ?

F?G

&580

0<<

005 *

+

+ ! ,

! ? + K H

E ! !$

(30)

!+ F H

G * +

+ H F !

G ! + H

+ : + ! !

+ + ! =

+ ! ! +

+ ! ! H

4 +

!

+

&580 ! &588 !

! 4 H

F1:G 4 &580

! 1: ! !

&580

F ! ,2G ( ,, +

&580 > /)4 C7-D

4 + 1: !$

# 1 : F#1:GE Q3R:> R

R" >R1 J 3:R>: ?E >S!Q

= 1: ! H

! + %"

+

+ J#4

= C72D

! $ ! !$ 1: =

1: !

+ !

( & )'*+

&580 ; = H

; !+

. $!% *$!% *!

/0)*"

12 22!

(31)

! C75D ( ! K

;

! ! = ;

!

!

!

! K ;

!

; 4

!!

#; H

; J=: 4 F=:4G

&0 ! H

= ! F ! ,5G !

! = ! ! ! ;H

E

! =

! F ! ,7G L

!

* ! ! H

! ! ! !

! !

F G

!

C75D

! = ! !

! !

+ ! E

4 !

4

! !

!

! H

! H

L ! L

! H

L ! L

(32)

!E

!

! L F! G

!

3= 3=

, ! H

L

+ ! ! !

! ! H

! ! =

( C75D

!

!

! +

- 4 ! + H

! !

! !

(33)

!"#

$ %&' (%)' *%+' &% ' %#,,-.///0112

"

+ 0 3220 33 45(

0 3220 32 45(

. %&' (%)' *%+' &% '

%& ' !%6//

. 7 8" $

7 8" !"#

7 8" 31

5 31

29299:9

300091223

2:2331122323

01:::3:1

:013330:0:2200:

:329309131:99

20911

0211310099391

231

!# 92:

!"#

103:3:211911:

:92020:3019320103:

211392:002220

3:32:2033:::023

123::39139311310:3

99901:102311300:

:221391:099

22:;

(,,E ?+ &580

(34)

+ # %,#

4 H

F , -G

J

1 : F1:G

3=

!

4

( H

!

4 1:

!

!

!$

!

>

H

>

> +H

E = ) 4

!$ ) 4 ) J

! ! 3=

4 H

! ,2E > &580

(35)

+ # %,#

4 H

F ,G

! !

1 : F1:G

3=

!

J

" H

!

>

H

> +H

E = ) 4

!$ ) 4 ) J

! ! 3=

4 H

! ,5E > &580 !

(36)

' 3 $ %,#

# ! / !

! ! H

! H

4 !

9

"! 4

H

+! H

/ ! L

!

$ ! H

" 3 !

F

!G

! ,7E ?+ ! &580

(37)

4 ! 4 &580

!

!

= &580

3 = F3=G 3= H

3 / F3/GC77D =3/ H

! 3=

* 3/ 3 / F3/G !

* ; &580 3= ;

3= ! H

/)4 3

= 3=

F 3=G

4 ; 3= C7.DE

! *

* *!

4 3= 3= !

8 3= ? 3=

! 3=

FG =

3= 4

! 3=L

! ! !

B "!L !

!

!

3=

"!L 3= H

= "!

E =

=

!

( "!L !

, 4 ! ! !

3= 4

3= 8 ! 3=

(,- +3= 3=

3= !+

(38)

,-

m n o p

a b c d e f g h i j k l

End−

Entities Root CAs

Intermediate CAs

(,-E ?+ 3= 3=

= !

"! !

4 =

!!

"!

! !

4 "! =

!

!

L :=

L

L !

"!L H

L!

- 4 !! 3=

! ?+ 3= :

?+ ! E ' ?

3 1 " =

!

!

! ! 3=

! !

! !

!

! 3= !

?+ : 3=

* ! !

3= ! 4

(39)

!

4 "!

(,2 + !

End−

Entities Root CAs

Intermediate CAs

Bob Bob

Bob

( ,2E ?+ !

)'*+

&580 ! K 4

-

'

&580 !

4 &580

@+! / &580

! ! !

! ! H

4 ! &580

* ! ;

1: +

1:B =3= 1: !$

3=L K

1: K 1: K

H H ! 1: =

! K 1:

(40)

= ! 1:

1: 3= ! !

! ! !

:!

1: !$ +

= ! 1:

! ;

* ! 1: ! H

4 + E !$

1:

! ;

&580 !

> ! !

! ! H

(+ !

! ! 4 &580

;

! H

+

! !

* &580 B

4JH# &580 E Q

! F G

! +

+ Q C D !

+ !

3= ! B 3= F

3=G 3= F 3=G = !

6! # C7<D !

3=! !

! !

! 3= ? !

! !

3/ ! ! 3=

+ !

! 3= 3/J 3/

! +

(41)

& '

! ,. ; ! K

/)4914 /6/ &580

(42)

#

! )

*

* 3 ! .

&

4!

5

6! . +

!

7*! 6. #

!

6*" !

.& *" &#

!

7*#

*!

89 *"

*#

*9:;!

*

7*!

6*"

!

7 * !

*

*!

+ <

4 05=+'!

= . *! .3

&!

6*" !

. *"

!

*!

! ,.E 3 /)4914 /6/ &580

(43)

# ! H

+

!$ ! !$

C <D 4 ! 4

!

()

3 # F3# G C <D H

= 3# H

! ! 3=

( - =: + 3# C,2D

CertificateRevocationList ::= SIGNED SEQUENCE{

signature AlgorithmIdentifier, issuer Name,

lastUpdate UTCTime, nextUpdate UTCTime, revokedCertificates

SEQUENCE OF CRLEntry OPTIONAL}

revocationDate UTCTime}

CRLEntry ::=SEQUENCE{

userCertificate SerialNumber,

(- E =: + 3#

= 3# !

! = 3# ! 3=

= 3#

+ + *+ =

(44)

3= 4

3# C,5D 3#

&580 3# +

> 3# !

C0, D ? 3#

K + ! 3#

! !

+ ! 4

% ,

1 3# &5803# + ! &580,

1 3# ! ;

3# = 3#

;3# ! 1 3#

; 3#

!

,

3# ! &580 3# +

! &580 - 3# !

! ; 3#

! 3# 3= !

3# !

? 3# !

K

!

! ! K 9

!!

% ,

> ! 3# ! !$

!$ L

3= !$

!

(45)

= 3# %

! 3#

3# % ,

3# !

= 3# !

! 3# # + +

3#

3# ! 4 3#

H

!

! 3# ! H

3# !

!

! >

A 3#

? 3#

3#

= 3# =

! !3#

3#

! !

1 F1G

> 3# 4 3=

; 3# !

4 !

! !

+ 3#

3= ! 3# ! H

3=L B 4 C <D =

# F=# G 4 3#

3= =# !

3= 3=

J + +

3=H

3=4 3=

(46)

3=

C,.D

&*

= = 1 F=1G H

! C- D = H

=1 !

! ! 3=

3 3 # F3#G =1

! 4 H

=1

3 # ! ) C,0D

00< ! C,<D =3#

3 = F3=G

F G 3=

+3# ! 3#=

! !

!

! = ! N!O

! !

! NN!

:

! 4

!

!

E

R F

G

8

= + !

+

R

F

TT

G 3= E

FR

G

+

!

! !

!

! !

+

3# !

+ .

(47)

!

-,

!

"!

( !

3#

3=

!

"!

"!

!50 ( !

F -,G

"! E

"!

! 4

"!

! 3# +

(13,17) (9,13) (8,9) (low,5)

(17,23)

(23,42)

(42,high) (5,8)

L

L L L L L L L 0

4

5

6

7 3 2

N N N N N N

N

N 0,0

0,1

0,2

0,3

0,4

0,5

0,6

0,7

N

N

N

N 1,0

1,1

1,2

1,3

N

N

N 2,0

2,1

3,0 Signed

root (root)

H

H

H H H H H H

H

H

H

H

H H H

H H

H

H

H

sign

H H 1

( -,E 3#

(48)

A 3# !

F! ,G ! C,<D

!

=

= ! !

3# 3#

3#

3# 3#

C-,D

3# A

! >

!

!

3# ! !

! K

: : ! ! ,H-

! C-8D

! 3= H

! =

! ! 1 !

!

+

>3 / F>3/GC,-D ;

4 >3/ !

H

4C,-DH

+

= >3/ + !

$ >3/

>3/

!

(49)

>3/

C,-D !! 3=

!

! 3=

?

!

!

!

!

! *

C,-D

> ! >3/

!

>3/ >3/

4

! !!

?

+

J !

= !

! ! +

4C,-D >3/

>! 1!

+ @ !

+

! !

=

!

! ! !

!

= ! >3/ H

H

*

(50)

>3/ +! H

>3/

4 K

! *

>3/ K

! ! H

3# + >3/ H

!!!

>3/ K

!

(

! !

! + !

!

3# = +

= !

+ !

> H !

'

3

!! H

= !

/

4 C0D #

!

-( + !.* (

F + H

G

-( +

! !

! 3=

/)4914 +H

(51)

! /)4914 !

!

3=

! * !

B 4

!

!!

(

3= : :

C-8D 4

!

''

4 K F !

C--DG 4

4 4

!

>

:

4 /)4

+ H

!

+ > H

!

E ! F +

! G

= ! + H

" >3/ 3# +

3# >

! J

(52)

H 4 ! A

! !

C <D

J +

/)4 = ! 4#? 3 002

+

C,8D

!

!

(53)

!

"#$##"

= !H H

H

=

=

!

= !

F G

=

L

! H

C22D !

9 = H 9

H

! E

,

- ! 3=

C25D !

! A !

(54)

2 H

! 2, +

/! !$

/ !$

" 3

! !$

# ! !H

$

! !$

? ! !$

!$ L!

! 2 E :

F!

G

F!

G

F!

G

F!

G

"

# !

!

!

!

F! G

"

#

!

!

!

!

F!

G

! 2,E /

R(FF

G

# RQ Q #

R Q Q

! (

!

!

+

>

(55)

! HH HF4G

!

9

!

9 !

' 3#

>3/( 9 3# >3/ ! 9

C2.D ! ! ! :

?+ !

&580 !

! !

E

! ! ; 3=

, +

- 1:

F1:G

= ! ! &580 !

!

3=

3= 3=

! 3= 4

H- !

6

!

!

* ! !

9 ! 3#

=

!

!

4

9 =

! !

4 9 + !

K ! 1 C27D

(56)

+

F!

G

F!

G

F!

G

F!

G

¼

F!

G

F!

G

"

# !

!

!

!

F!

G

"

# !

!

!

!

F!

G

"

#

!

!

!

!

F!

G

"

#

!

!

!

!

F!

G

! 2-E HH H

9 !

F G

!

E

" !

!

!

F!

G

QQ

*

!

L

! !

K

!

(57)

00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000

11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111

00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000 00000

11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111 11111

000000 000000 000000 000000 000000 000000 000000 000000 000000 000000 000000 000000 000000 000000 000000 000000 000000 000000 000000 000000 000000 000000 000000 000000 000000 000000

111111 111111 111111 111111 111111 111111 111111 111111 111111 111111 111111 111111 111111 111111 111111 111111 111111 111111 111111 111111 111111 111111 111111 111111 111111 111111

Intruder , Server

Client

The intruder intercepts the updated

(7) (6) (3) (2)

(5)

(8) (4) (1) Decrypts with the compromised

private key. Calculates the

side can not realise that the client, so that the server and server, and master secret.

previously sent from intruder Signs hash of messages the status of the certificate.

is either unable to or do not check to the client, assuming the client The compromised certificate is sent

Intercepts signed hash from

previously sent from intruder Sends signed hash of messages and client, together with the master secret.

the compromised public key has been used.

and the 4 first messages sent Intercepts hash of master key Encrypts master secret with certificate sent from the server.

Intercepts the master secret.

master secret. the updated public key.

intentionally for the client.

(2 E 1 4

(58)
(59)

#& '

= / ? F/?G !

! F G

!

! /?

! E K

4

, '' -

3 /? 1?

=? =

!

!

! F

G !

=

! K ! !

* !

! =

! !

! C-7D (

!$ $ %

% !!

&

& ! & !C78D

+ '(+>%

:?@;" 4 !

(60)

= C-5D?! -!

-8 ? !

!! 28! ! !

! 28 ! * ?

! U V 2 !

!

2

! ! 57!

! ! >! 2

!

!

! !

'

4

! C-.D 4

/?

!

! !

F C-<D G

N

!

FH G !

=

!! ! !

!

? E

= E '

'

(61)

- 3 E

R F'

W

W

G R F' W W

G

2 1 E

F G H

5 ? ! E (

½ F

GR

(

F G R

7 ) '

'

# E

= E

, 3 E

E

RF'

W

W

G

R F' W

W

G

- 1 + ! E

¼

½

¼

2 " F G !

!

' !- - .

/

C-0D

= ! F G

! ! !

!

9 4

! ! !

/? !

!

4 /?

!

(62)

!

!

!! = +

C-0D #=

= @ L!H

! ;

4 !

! + +

!

+ 4 ! 4 H

! + /)3U

C28D

!

! !

H

'

4 K

/?

! ! 9 !

!

!

! A H

= <8! ! ,8

! >

!

! =

,!

L +

* !

! *

L + !

=

+ H

! ! * !

(63)

! !

!

4 !

/?+C-.D

!

9

= !!

! !$ !

+ 4

= ! ; !

! ? I

C-.D ! <! 4

! 07! R , C-.D

!,8

! !

! ! ; ! K !

H

H

+ K

> C-.D !

! +2 /4: H !

! !

! ! !

!

3

! =

!

;

A "%

B "CD A !

(64)

/)4

' * '' -

= /?

;

/4:

6 !

F G !

= ! !

HH

! ! +H

! !

3

C2,D 3

> ! /3L

/1=L ! 3

F#(G = !

*

#(

0.2 ! #

Q= H

<H! 5 ; ,57 8,2 !

#= 7 ,2 )" #> 7 )" ??/#> F? ?!

/!#H>G H!

Q C2 D (5

/ ! ; H

E C2-D = H F

H G

?+ H

(65)

API DATA

I/O CPU

Input

Output

RAM ROM

EEPROM

CRYPTO MODULE

(5 E "

3/J " H H

! ! 3/J

! !

K K

! " H

!

! K

:H

+

K

K

4 +

> ! !

=

+ *

!

! !

4 !

+ H

'

=H

5 /?K!

(66)

!

!

!

/4: /4: - <

!

/4: "

! H

!

= H

! $

H

!

! !

! !

K E

Q4 Q !

!

9

!

! = !

K

! > !

!

+

+

(67)

#)

4 4 "L H

! ! H

"L ! C2<D "L

C20D 4 ! A

! ?1" ( C5,D

4 !

! "

4 4 +

! 4

A

H

. ' " '

" ! ;! 4 :H

,. = ,888 !

" " : ! 28

,88888

*

7 " :F

:!G

6 : " H

:

/4:

4 +E F ?!

*++6!

(68)

A 1 "L

! H

: K ! 7

: "

* ! 7 "

: = " :

!

< * "

! ! !

4 : L :

: *

: = 7 ! 7

: "6

!

! ! ! 088 "

+

( 7

"

! 9"

!

" = !

.+3

++6++6!

! 674 "

4 " + *

!

(69)
(70)

%&'&&&(&&)* : H

%&'&&&(&&)+

<

/ :

!

,888

'&&',*(&&*+

<

: !

H

! F088G

: !

! H

,888H,852

0<5

'&&',)%(-') H

H

: !

:

.+&*(-+*'%' # H : !H

!

<0.

! 7 E :

2 /4: :

/4:

" /4:

= ! : "

! !

/4:

4/4: : " &580

*

!

; 8 + .!

-!

C58D

/? = :

!

(71)

" H &580 ' 3=8

3=8, !!

! K 3=L

( 7- + " 3=8 H

72

K ! E

F3:G

; F>G :

,

- ! " 3=8, 3=8

. */

" ! ! H

,< ! !

! ,<

! !

"

E

" !

"

(72)

! !

, ! "

!

! !

! !

" !

!

! 3= L

LF3:G

F1:G

- 9 /4: H

: !

"

! ! 4

" !

! : :

! = +H

! /4:

(73)

" H C5 D =

" /4: !

:

! 2 /4: > "L E

Q> !

Q

4 /4:

2

2 /4:

! 8888 !/4:

,88888 " "L /4:

L :

A 2 /4: 4 4

!

= ! /4:

:

: /4: ! H

/4: : ! "

!!

/4: : * !

: " !!

!!

:B : :

C5-D 6!

: !

! ! +

L : ! ! A

: !!

: : :

C52DE

: : E %

%

%

%

% %

%

%

%

%

% %

E !

G :%;!

(74)

:

! H

! !

! !

! ! 7, 4 !

! !

!

E H

0 8

%

%

%

%

% %

%

%

%

%

% %

* : ! !

!

! 8 : * H

!

! 8

E

&

&

&

&

G

# 3 5 3 (

*&&/-)( )52 <55H <00

&&&/)(( 088H 000

*&&/((( *55 ,888H,852

! 7,E 3 ! ! !

* :

:!

: ! " 4 K

:

!! =

4 K

4 E

(75)

!

+ ! = : !! !

! :

4 !! = 4

+ ! :

4 ! ! K

:(

K /4:

!! /4: : !

! 4

: ! =

! 4

!

* !

"L K :

/4:

*

4/

" /4: :! 4

4 ! "

! : <H 88

: ,88888 " =

"L ! ,8

! 888H200

588 !:!

!!

* : E

½¼¼

½¾½

+ 6 /4: :

+ = /4: R H + /4:

+ = /4:

(76)

= ! : E ,

! L

! : 9 = :

! " *

! A !

!! " A !

> " :

" (C55D -2X

! " ,7H-5

* ! :

! ,7H-5 * :

" + !

" E

:! : E

+ = /4:

= ! : E ,

4 ! : !

" H

: ! H+

4 :

! = !

! : 4 :

! : ( H

,7H-5 ! -8<,2

! C57D E -!

4 :

: !

070H 0..

:! : E

!! !+

:

(77)

4 K :! H

" !:

" : 4

* 4

! E

#

, /! "

- 4

2 '

0

3/J!

" 4 3/J H

!

: : " *

:

: : ! : >

"L H

: K /4:

! 6 ! :

! A

! H

"L

= ! !

"L >

4/ + !

F G 4 !

" K

+

E

3

, A 4/

- (

(78)

;!

! ! H

@ B

! ! :

"

!

!

/4: : !

-87788 :

!! 070H 0.. >

K : !7-K

"L

:

4 $ 6

'&&& 85X

*&&& ,5X

'&&&& 5X

.&&&& 8X

! 7-E #

* !! "

/4: ! !

+ = !! !

!

!:"L

6 "

A 4/ H

!

> : /4: !

!

!! /4: :

= ! ! 4/

(79)

: /4:

" = C5.D

A ! ! / 4/

! =+

>

! "

: /4: !

$

! :

* !

! !

+ 4#3 /4: :

! 4#3

0 #

4 : ! !

070H 0.. !

=4

>

!+C50D (

: * !

! !! !

! + + :

!! :

! !

,7H-5 -282 2 C50D

: 4 + 2.

: E : *

!! !

" :

,7H-5

:! " E 7<888

<:%C;" *

)0

(80)

= ! : E

,

0 1

"

= ! H

4/ ! !

4

: ! ! "

H

" /4: : ! !"

!

B ! :

!!

/4:

" ! H

4 !

K 4

!! :

E

= ! E ,

> A ! /4:

> /4: ! 2 -

/4: !

! !" !!

/4: !E

+ ! !E ,

= !

: ! " H

4 ! "

K : !H

"

: ! " A

!

(81)

4 "L 4

F G

"L ( 4 H

! ! /4:

! "L !

"L H

"L

!$ E ;

L :

2 /4:

; 9 = ! !

: /4:

! 2 K

! : /4:

! > ! !

! :

!!!

! :

> !

+ ! /4:

L : " : ! !

1F1G

"L

! +

= ! "

?1"( H

'

! !!

4 ! " 4

! 4 *

!

! + !

! !

3 +

+4 4 !

$

(82)
(83)

#& !

4 4 /)4 4 !H

" /)4E /6/ /)4914 &580 4

;/)4!

H

@ + /)4( 4

K (K /)4

"L =

" "L "

= 1! ,88- "

! ! !

! +

4 3 !

/)4 ! 4

E

>! B 4

!

B 4

! !

B ! /?

B *

B

(84)

!

! + H

" :!

! K /)4B 3

+ !

! 3= H

= !

1 * B

; B

B

(85)

C D )L !

/ /! )3 F 0.<G

C,D 334#&58 F 002GT4>94?30502H,E 0024 H

H > 4 H 1 E

C-D = ! = 3H

- F 005 =3 /946=30H 5G

C2D 3 ? " ( ; " #(3 ,70-E

/)4 # 4 ! 000

011221/1 . +(%2 ,8 (!H

,88-

C5D # # " 14 H = 1 !

4 !011! 222 1

3#1'&2 ,8 (!,88-

C7D : = ! 3 &580 :! ,888

!0114442!213 5 1 1 1 ,2

(!,882

C.D 13YH??3? ( =+

# # 3 3 1 /)4914

!011! 222 13 # 1" 5 6 7$ /

""!# 2 ,2 (!H

,882

C<D 1 3L L /)4914 93

3 1 /)4914 ! ,88

!011! 22213 1 ! 1 5/ 2

,2 (! ,882

(86)

0 123 % ' :

% : -)4) 5, 6! 07 (! 00<

!011! 2221 # 1 # 2

,2 (! ,882

C 8D * 3 : E /

/ / 00<

C D 4JH&580F0-GT4>94?30502H<E 0054 H>

4 H 1 = (

C ,D 4JH # &588 &5,5F 00-GT4>94?3 0502E 0024H

H> 4 H 1

C -D !011444221 1 1% 2.1 && &'2!

< ,88-

C 2D (C" D#C#= ! D=4H

= ! 3 / = ; = ,88,

011221/1 % .,'2 ,8

,88-

C 5D * ( " ? 3E

" 4 1 ? /H

/# 00. ,5

C 7D # /)4 ,88,

C .D 3 ? /)4914 *! 2 = ,88

!011422131! 14 2! ,2

(!,882

C <D = Z Y Y ) H

$ # /)4 / 000

: 1 !

C 0D = = /)4& # 4 1 Q*

4?( /)4& Q > ! 000

C,8D =" # /! ) 4 1

3 E "// 4/ =

,< ,888

(87)

4 007

C,,D 4J 4>94?3 ( / 1 = 3

?+ = 000

C,-D # = =! 6

3 = &580 4 /! ) 4 E >H

3 / 4?( #(3,578 Y 000

!0114442211 .*+& 2 -

,88-

C,2D #(3 2,, H=, 3 # + (! 00-

C,5D = Z /! )3 # [ JH

) > 3 (!,888

C,7D / * 1 3 E = #H

J ) =

!0114442211 17 7.&& &1 14 ! ! 1

,, =,88-

C,.D / 6 ? : * ) !

/)4 ! ( ( > J =

!0114442#2281 1 2

,2 (! ,882

C,<D # = /! ) /1

1 1 ? ? J

0.0

C,0D /3) > 3 # ' 3H

'

C-8D :)!:3 # 3 JH

*;4

C- D )) =! :/

? /!H 3 # "

C-,D / 1 = #! = #

Q3 * ? 3 # BQ

!011444252 1 1 && 9 2

,2 (!,882

(88)

275 75H . =

" * 4 (! 000

C-2D /)3 U5 H /H" 3 #=

! : ' ,8 000

!0114442 21 1 5 15 /* 1 2!

, ,88-

C-5D " E ?

34L: 3 >

Y 5 000

C-7D 3 # ? H = 4 ,88-

!011444221 1 "1"! 9 ! 9 "2

,2 (! ,882

C-.D 3 ? 3 # ! " /H

) / ? ,< > ! 000

!0114442!21 / / 2 H

,2 (!,882

C-<D = 0 =3 (( :

0.0 7 ,H7 -

C-0D 1:":) 33

3@ !011444221 1 9 2

,2 (! ,882

C28D /)3U E #= ? #= !H

: , Y ,88,

!0114442 21 1 5 15 /' 1 2!

7 ,88-

C2 D #* ?3?7-7 3 H

3 3! '!

C2,D ) 3 >*> 82 ,88

!011221:;<;1 / " /:;< ; ,<

,88-

C2-D / ! 3 /

!0114442222513 % .1 9 52!

,0 ,88-

(89)

Q?+HQ = 3 H! = / H

C25D 1 3 = #(3 ,,27 / ' 8

!0112251 1 ..)+ 2! 0 Y

,88-

C27D 1 J !0114442! 25

21 Y ,88-

C2.D = $ ** 3 3H

# # ,888H,88,

C2<D !0114442552 1 =< 1; 1;# 5 1

19&%&)&.2 ,

Y ,88-

C20D # " , Y

C58D !0114442821 1 1 51 1! 9 .'

1 2! ,2 Y ,88-

C5 D !0114442552 15 4 11 H

! ,<

Y ,88-

C5,D !01144422 21 ,< Y,88-

C5-D ( \ - !01144422511># 2 1

?@1>=&&'+*.)%A; ,2 (! ,882

C52D !011444252 1 1 5 1

2!AB')& +,2 - Y,88-

C55D $ Q? !S H

4$ J " :H

!,88,

C57D !0114442211& .1&. 1'& 1 1 /. &&%/ &)/% &/&' 2! 2

, > ! ,88-

C5.D !0114442222 1 1 .%(9 '2 &%1 1

.22 ,8 > !,88-

(90)

C50D !0114442211&. 1&'1 '&1 5 1 2

> !,, ,88- / ,88,

C78D * 3 * Q4 H

Q

C7 D !011444222251 162 $! 1 1 2! 2

:! ,88-

C7,D Y " * J 1 4H

3 H" 4 H

3 = 3 / :! ,88-

C7-D !0114442212 0 1! ,88-

C72D !0114442211 %. ,&2! 2 5 YH

,882

C75D ( # Q= 4 = ! 3H

/ = ; Q = ,88,

!0114442211 %.,' 2 2 (!

,2 ,882

C77D !0114442211 . *.-2 ! - YH

,882

C7.D 3 = J /)4 ,88- ! /

? 4 ?

C7<D !011444222251$ ! 1 1 / $ 1

Y ,8 ,882

C70D !0114442/21 ! #( (&&1 6& &1 1 &&' 2!

Y ,, ,882

Referanser

RELATERTE DOKUMENTER

is to explore quantum attractors, a class of time-periodic asymptotic states of open many-body quantum systems which are subjected to periodic modulations of their

There had been an innovative report prepared by Lord Dawson in 1920 for the Minister of Health’s Consultative Council on Medical and Allied Services, in which he used his

As a principle, a validating agent need certificates and revocation status for the entire certificate path in order to verify a signature.. The report will now commence with

− CRLs are periodically issued and posted to a repository, even if there are no changes or updates to be made. NPKI Root CA CRLs shall be published bi-weekly. NPKI at tier 2 and

The secret information contained by the authentication center consist of the secret key shared with the USIM of the mobile terminal, the algorithm for computing the signed response,

The operational processes for the Public Key Infrastructure (PKI) described in the previous section are 1) Enrolment, in which an entity applies for and receives a signed

Each Textbook Count cycle ended with a public event to showcase the results in Manila. There were at least four public presentations with between 40 and 60 participants.

inspection by port state control (PSC) and others, such as during vetting by charterers. 2) Single Window: Ships entering a foreign port must declare important information on the