Which services are provided by Nonrepudiation?

Which services are provided by Nonrepudiation?

Nonrepudiation is typically comprised of authentication, auditing/logging, and cryptography services. A common application of this service would be digital signing of e-mail messages to prove that the message received was actually sent by the purported sender.

What is the difference between authentication service and data non-repudiation services?

I think you mean, what is the difference between authentication and non-repudiation. Authentication is verifying the identity of a person or process. It is a technical construct. Non-repudiation is being able to assure that an action cannot be denied; being able to prove that someone did something, for example.

What is the legal perspective on non repudiation?

Greg Broiles provides a legal perspective on non-repudiation. Non-repudiation is about having a proof that the announced author really wrote the message — and such the proof can be verified even without the consent of the said author: the author must not be able to repudiate his message.

How to achieve non repudiation in X.509 certificates?

X.509 certificates have a “non-repudiation” bit in the keyusage attribute, to identify the intended use of the key. rfc5280 talks about this. None Repudiation refers to having proof of any transaction made from the requester to the authoriser and also from the authoriser to the requester.

Can a digital signature be used for non repudiation?

No. Digital signatures are not sufficient for non-repudiation — not by a long shot. Non-repudiation is a legal concept. It means that, if there is a dispute, in a lawsuit it will be possible to hold one party to their commitments.

What’s the difference between non repudiation and cryptography?

Humans vs. computers. Legally, non-repudiation is about the actions of a human. A court is going to be looking for evidence that a human (e.g., Grandpa) assented to the terms of the contract/transaction. The cryptographic schemes cannot achieve that. They can only show that some computer performed some action.