Solved

How secure is Lotus Notes "digital signature"?

Posted on 2006-06-14
5
1,279 Views
Last Modified: 2013-12-18
How secure is Lotus Notes "digital signature"?
Like how does it compare to other digital signature technologies?
Don't know much about them, but "X.509" is one example.
0
Comment
Question by:wsfindlater
  • 2
  • 2
5 Comments
 
LVL 63

Assisted Solution

by:SysExpert
SysExpert earned 200 total points
ID: 16908121
It is 128 bit I think in R6 and above,  using Public/Private keys, so it should e extremely secure and satisfy all  US Govt. regulations.

Domino also supports X.500 partially.

I would check the IBM site for more detailed info.

I hope this helps !
0
 
LVL 46

Accepted Solution

by:
Sjef Bosman earned 250 total points
ID: 16909286
0
 
LVL 15

Assisted Solution

by:bpmurray
bpmurray earned 50 total points
ID: 16913092
It uses standard digital signatures from Verisign and other companies, so they're as safe and secure as any.
0
 
LVL 46

Expert Comment

by:Sjef Bosman
ID: 16913338
Verisign, that's for SSL, but it's not used for Notes's internal security. Red the Readbook...

1.2.2 Support for larger keys in Notes and Domino 7

As computing power increases, so does the need to extend key lengths to protect against brute force attacks.

In Release 6.0, Notes and Domino can use 1024-bit RSA keys, but cannot not generate them, and can use 128-bit RC4 keys, but cannot use 128-bit RC2 keys. With the advent of 6.0.4 and 6.5.1, Notes and Domino continued to use 1024-bit RSA but can now use 128-bit RC2 keys (however, Notes and Domino cannot generate these RC2 keys).

In Release 7.0, enhancements in Notes and Domino permit 1024-bit RSA keys to be used and generated. In addition, 128-bit RC2 keys can also be used and generated, and there is underlying support for 2048-bit RSA keys.

To help with implementing larger keys, we use key rollover, the process used to update the set of Notes public and private keys that is stored in user and server ID files. Use this to periodically replace this set of keys as a precaution against undetected compromise of the private key, as a remedy to recover from a known compromise of the private key, to increase security by updating to a larger key.
0
 
LVL 15

Expert Comment

by:bpmurray
ID: 16913391
I meant for external security - the traditional use of "digital signature" as sent across the web, rather than the internal stuff. As it says in that quote, the RC2 keys are from external certificates, like Verisign.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Lack of Storage capacity is a common problem that exists in every field of life. Here we are taking the case of Lotus Notes Emails, as we all know that we are totally depend on e-communication i.e. Emails. This article is fully dedicated to resolvin…
This article covers general Notes 8.5 troubleshooting information including recreating the Notes\Data folder.
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now