Public Key Infrastructure (PKI) in Cybersecurity - Mini Project: Build & Apply

Understanding Public Key Infrastructure (PKI)

📖 Scenario: You work in a company that wants to secure its online communications. Your task is to understand and build a simple model of Public Key Infrastructure (PKI) to see how digital certificates and keys work together to keep data safe.

🎯 Goal: Build a step-by-step model of PKI components using simple data structures to understand how keys and certificates are created, stored, and verified.

📋 What You'll Learn

Create a dictionary to represent users and their public keys

Add a variable to represent the Certificate Authority (CA) name

Create a function or logic to simulate issuing a digital certificate

Add a final step to simulate verifying a certificate using the CA

💡 Why This Matters

🌍 Real World

PKI is used to secure websites, emails, and software by ensuring that public keys are authentic and trusted.

💼 Career

Understanding PKI is essential for cybersecurity roles, network administrators, and software developers working on secure communications.

1

DATA SETUP: Create a dictionary of users and their public keys

Create a dictionary called users_public_keys with these exact entries: 'Alice': 'AlicePublicKey123', 'Bob': 'BobPublicKey456', 'Charlie': 'CharliePublicKey789'.

Cybersecurity

# Create the dictionary users_public_keys with the given entries
# Your code here

Hint

Use curly braces to create a dictionary with keys as user names and values as their public keys.

2

CONFIGURATION: Add the Certificate Authority (CA) name

Create a variable called certificate_authority and set it to the string 'TrustedCA'.

Cybersecurity

users_public_keys = {
    'Alice': 'AlicePublicKey123',
    'Bob': 'BobPublicKey456',
    'Charlie': 'CharliePublicKey789'
}
# Create the variable certificate_authority with value 'TrustedCA'
# Your code here

Hint

Just assign the string 'TrustedCA' to the variable certificate_authority.

3

CORE LOGIC: Simulate issuing digital certificates

Create a dictionary called digital_certificates where each key is a user name from users_public_keys and each value is a string combining the user's public key and the certificate_authority name separated by a dash. For example, for Alice it should be 'AlicePublicKey123-TrustedCA'.

Cybersecurity

users_public_keys = {
    'Alice': 'AlicePublicKey123',
    'Bob': 'BobPublicKey456',
    'Charlie': 'CharliePublicKey789'
}

certificate_authority = 'TrustedCA'
# Create digital_certificates by combining public keys and certificate_authority
# Your code here

Hint

Use a dictionary comprehension to combine each public key with the certificate authority name.

4

COMPLETION: Simulate verifying a digital certificate

Create a function called verify_certificate that takes a certificate string and returns True if the certificate ends with the certificate_authority name, otherwise returns False.

Cybersecurity

users_public_keys = {
    'Alice': 'AlicePublicKey123',
    'Bob': 'BobPublicKey456',
    'Charlie': 'CharliePublicKey789'
}

certificate_authority = 'TrustedCA'

digital_certificates = {user: f"{key}-{certificate_authority}" for user, key in users_public_keys.items()}
# Define verify_certificate function to check certificate validity
# Your code here

Hint

Use the string method endswith() to check if the certificate ends with the CA name.

Practice

1. What is the main purpose of Public Key Infrastructure (PKI)?

easy

A. To create firewalls for network security

B. To store passwords in a database

C. To securely exchange information using pairs of keys

D. To scan computers for viruses

Solution

1. Step 1: Understand PKI's role in security

   PKI uses pairs of keys (public and private) to encrypt and decrypt data, ensuring secure communication.

2. Step 2: Compare with other options

   Storing passwords, creating firewalls, and scanning for viruses are different security tasks unrelated to PKI.

3. Final Answer:

   To securely exchange information using pairs of keys -> Option C

4. Quick Check:

   PKI = Secure key pairs for communication [OK]

Hint: PKI = secure keys for safe communication [OK]

Common Mistakes:

• Confusing PKI with antivirus software
• Thinking PKI manages passwords directly
• Mixing PKI with firewall functions

2. Which of the following is the correct component of PKI?

easy

A. Firewall Manager

B. Password Vault

C. Antivirus Scanner

D. Certificate Authority (CA)

Solution

1. Step 1: Identify PKI components

   Certificate Authority (CA) issues digital certificates to verify identities in PKI.

2. Step 2: Eliminate unrelated options

   Firewall Manager, Antivirus Scanner, and Password Vault are security tools but not part of PKI.

3. Final Answer:

   Certificate Authority (CA) -> Option D

4. Quick Check:

   CA = PKI certificate issuer [OK]

Hint: CA issues certificates in PKI [OK]

Common Mistakes:

• Confusing CA with antivirus or firewall tools
• Thinking password vaults are PKI components

3. Consider this scenario: Alice wants to send a secret message to Bob using PKI. Which key does Alice use to encrypt the message?

medium

A. Bob's public key

B. Alice's private key

C. Bob's private key

D. Alice's public key

Solution

1. Step 1: Understand encryption in PKI

   In PKI, the sender encrypts the message using the receiver's public key so only the receiver can decrypt it.

2. Step 2: Identify correct key usage

   Alice uses Bob's public key to encrypt; Bob uses his private key to decrypt.

3. Final Answer:

   Bob's public key -> Option A

4. Quick Check:

   Encrypt with receiver's public key [OK]

Hint: Encrypt with receiver's public key [OK]

Common Mistakes:

• Using sender's keys for encryption
• Confusing public and private keys
• Encrypting with receiver's private key

4. A user tries to verify a digital certificate but gets an error. Which of these is the most likely cause?

medium

A. The certificate was not issued by a trusted Certificate Authority

B. The user's password is incorrect

C. The firewall is blocking the internet connection

D. The antivirus software is outdated

Solution

1. Step 1: Understand certificate verification

   Verification fails if the certificate is not from a trusted Certificate Authority (CA).

2. Step 2: Rule out unrelated causes

   Password errors, firewall issues, or antivirus updates do not directly cause certificate verification errors.

3. Final Answer:

   The certificate was not issued by a trusted Certificate Authority -> Option A

4. Quick Check:

   Untrusted CA causes verification error [OK]

Hint: Check if CA is trusted for certificate errors [OK]

Common Mistakes:

• Blaming password or firewall for certificate issues
• Ignoring the role of trusted CAs

5. An organization wants to ensure that their website visitors can trust their identity online. Which PKI component should they obtain and install?

hard

A. A private key stored on the visitor's device

B. A digital certificate issued by a trusted Certificate Authority

C. A firewall configured to block all incoming traffic

D. An antivirus program to scan visitor devices

Solution

1. Step 1: Identify how trust is established online

   Websites use digital certificates issued by trusted Certificate Authorities to prove their identity to visitors.

2. Step 2: Evaluate other options

   Private keys on visitor devices, firewalls, and antivirus programs do not establish website identity trust.

3. Final Answer:

   A digital certificate issued by a trusted Certificate Authority -> Option B

4. Quick Check:

   Trusted certificate = website identity trust [OK]

Hint: Get a trusted digital certificate for website trust [OK]

Common Mistakes:

• Thinking visitor devices hold website private keys
• Confusing firewalls or antivirus with identity proof