Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual page 823

message digest See one-way hash.
misrepresentation The presentation of an entity as a person or organization that it is not.
For example, a web site might pretend to be a furniture store when it is really just a site that
takes credit-card payments but never sends any goods. Misrepresentation is one form of
impersonation. See also spoofing.
Netscape Security Services (NSS) A set of libraries designed to support cross-platform
development of security-enabled communications applications. Applications built using the
NSS libraries support the Secure Sockets Layer (SSL) protocol for authentication, tamper
detection, and encryption, and the PKCS #11 protocol for cryptographic token interfaces.
Netscape uses NSS to support these features in a wide range of products, including
Certificate System. NSS is also available separately as a software development kit.
nonrepudiation The inability by the sender of a message to deny having sent the
message. A digital signature provides one form of nonrepudiation.
object signing A technology that allows software developers to sign Java code,
JavaScript scripts, or any kind of file and allows users to identify the signers and control
access by signed code to local system resources.
object-signing certificate A certificate whose associated private key is used to sign
objects using the technology known as object signing.
OCSP Online Certificate Status Protocol.
one-way hash A number of fixed length generated from data of arbitrary length with the
aid of a hashing algorithm. The number (also called a message digest) has two
characteristics: (1) It is unique to the hashed data. Any change in the data, even deleting or
altering a single character, results in a different value. (2) The content of the hashed data
cannot, for all practical purposes, be deduced from the hash.
operation The specific operation, such as read or write, that is being allowed or denied in
an access control instruction.
output In the context of the certificate profile feature, it defines the resulting form from a
successful certificate enrollment for a particular certificate profile. You set up each output,
which then dynamically creates the form from all outputs configured for this enrollment.
password-based authentication Confident identification by means of a name and
password. See also authentication, certificate-based authentication.
PKCS #7 The public-key cryptography standard that governs signing and encryption.
Glossary 823