The DOD PKI will satisfy these legal requirements for non-repudiation by deploying digital signature technology. Authentication is useful for remote access to information on a server, protecting network management from masqueraders, or for gaining physical access to a restricted area among other uses. Confidentiality Various types of transactions that occur over networks require confidentiality, including web-based access, file transfers, network management, Telnet, and payment transactions. Typically PKI facilities are used to support the establishment of a session key using a key exchange algorithm. The session key can be encrypted using recipients' public keys to ensure that only valid recipients can decrypt the session key and in turn, decrypt the transaction.
Key exchange is the process of establishing a secure communications channel.
That way, only an intended recipient can obtain the session key and decrypt the data. Public keys can be obtained from directories or through an exchange between the communicating parties. Integrity Integrity is a component of digital signatures. A digital signature is a message digest encrypted with the signer's private key. A message digest is a mathematical function and can be thought of as a fingerprint of the document.