How deeply does ASP.NET Core in Action, 3e cover public key cryptography?

Explains key roles and certificate trust chains, but stops short of algorithmic or mathematical details.

Public key cryptography

As explained in ASP.NET Core in Action, 3e

Public key cryptography is cryptography that uses a mathematically related public key and private key for encryption, decryption, or authentication.

Public-key cryptography uses a mathematically related public key and private key. In HTTPS, the browser can see the public key, while only the server holds the private key. section 28.2

HTTPS uses the key pair and certificate chain to protect traffic and establish server trust:

Data encrypted with the server’s public key can be decrypted only with its private key. section 28.2
Certificate authorities and trusted root certificates help browsers verify that the certificate belongs to the server. section 28.2

Trusting a development certificate

ASP.NET Core development applications use an HTTPS development certificate. If browsers warn that it is untrusted, trust it with: dotnet dev-certs https --trust. section 28.2

Figure 28.4 The developer certificate is not trusted by default, so apps serving HTTPS traffic using it will be marked as insecure by browsers. Although you can bypass the warnings if necessary, you should instead update the certificate to be trusted.

Use the figure to recognize the browser warning produced by an untrusted development certificate. section 28.2

How ASP.NET Core in Action, 3e covers it

liveBook manning.com

Read ASP.NET Core in Action, 3e on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Software Security for DevelopersA public-key cryptosystem is a cryptographic system that uses mathematically related public and private keys for security operations.
liveBook manning.com

Real-World CryptographyAsymmetric encryption is an encryption technique in which a public key encrypts data and a corresponding private key decrypts it.
liveBook manning.com

Hacking CryptographyPublic-key cryptography is cryptography based on paired public and private keys, allowing operations such as encryption or signature verification with a public key while restricting the corresponding inverse operation to the private-key holder.
liveBook manning.com

Build Python Web Apps with StreamlitPublic-key cryptography is a cryptographic technique that uses mathematically related public and private keys for secure authentication or communication.

Compare how 5 books explain public key cryptography →

Related concepts

symmetric key encryptioncontrasts with · Symmetric-key encryption is cryptography that uses the same shared secret key, or equivalent derived key material, to encrypt and decrypt data.
TLSused by · Transport Layer Security (TLS) is a cryptographic protocol that protects network communications through confidentiality, integrity, and authentication of communicating endpoints.
encryptionkind of · Encryption is the cryptographic transformation of readable data into ciphertext to conceal its contents, reversible through decryption with appropriate information.
public-private key pairuses · A public-private key pair is a mathematically related public key and private key used together for asymmetric cryptographic operations.
key-distribution problemaddresses · The key-distribution problem is the challenge of securely delivering cryptographic keys to authorized communicating parties while preventing unauthorized access or exposure.
key exchangeused by · Key exchange is a cryptographic protocol by which communicating parties establish a shared secret over a communication channel without directly transmitting that secret.

This explainer was generated by Manning's knowledge graph from the text of ASP.NET Core in Action, 3e. The section links point to the parts of the book it draws on.