Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual page 825

object signing A technology that allows software developers to sign Java code,
JavaScript scripts, or any kind of file and allows users to identify the signers and
control access by signed code to local system resources.
object-signing certificate A certificate whose associated private key is used to
sign objects using the technology known as object signing.
one-way hash A number of fixed length generated from data of arbitrary length
with the aid of a hashing algorithm. The number (also called a message digest) has
two characteristics: (1) It is unique to the hashed data. Any change in the data, even
deleting or altering a single character, results in a different value. (2) The content of
the hashed data cannot, for all practical purposes, be deduced from the hash.
password-based authentication Confident identification by means of a name
and password. See also authentication, certificate-based authentication.
PKCS #7 The public-key cryptography standard that governs signing and
encryption.
PKCS #10 The public-key cryptography standard that governs certificate
requests.
PKCS #11 The public-key cryptography standard that governs cryptographic
tokens such as smart cards.
PKCS #11 module A driver for a cryptographic device that provides
cryptographic services, such as encryption and decryption, via the PKCS #11
interface. A PKCS #11 module (also called a cryptographic module or cryptographic
service provider) can be implemented in either hardware or software. A PKCS #11
module always has one or more slots, which may be implemented as physical
hardware slots in some form of physical reader (for example, for smart cards) or as
conceptual slots in software. Each slot for a PKCS #11 module can in turn contain a
token, which is the hardware or software device that actually provides
cryptographic services and optionally stores certificates and keys. Netscape
provides a built-in PKCS #11 module with Certificate Management System.
PCKS #12 The public-key cryptography standard that governs key portability.
policy module A rule (implemented as a Java class) that validates the contents of
a certificate request for that rule and formulates the contents of the certificate to be
issued.
Glossary 825