CACs and PAVs

Jasiono

I read in the security+ book about CACs and PIVs. I know what they are but something has me feeling awkward about what's in the book.

It says that they provide confidentiality, integrity, authentication and non-repudiation.

How does it provide integrity? I thought integrity is the theory behind information remaining the same and not being altered.

I think I just answered my own question actually lol.

Does it provide integrity due to how secure it is in preventing unauthorized users in certain areas?

joberly

As far as I know, they use X.509 certificates. Therefore they can provide integrity just as any other cert based mechanism. (The hash gets encrypted, therefore integrity is upheld even though the content is not necessarily confidential).

Hopefully someone else will chime in and correct me if I'm wrong!