Key management system

In PKI, procedures and tools that centralize generation and storage of cryptographic keys.

A measure of disorder. Cryptographic systems should exhibit high entropy to better resist brute force attacks.

The process by which an algorithm produces numbers that approximate randomness without being truly random.

True random number generator (TRNG)

A method of generating random values by sampling physical phenomena that has a high rate of entropy.

Trusted Platform Module (TPM)

Specification for secure hardware-based storage of encryption keys, hashed passwords, and other user- and platform-identification information.

Hardware security module (HSM)

An appliance for generating and storing cryptographic keys. This sort of solution may be less susceptible to tampering and insider threats than software-based storage.

Application programming interface (API)

Methods exposed by a script or program that allow other scripts or programs to use it. For example, an API enables software developers to access functions of the TCP/IP network stack under a particular operating system.

CPU extensions that protect data stored in system memory so that an untrusted process cannot read it.

In key management, the storage of a backup key with a third party.

Information that is primarily stored on specific media, rather than moving from one medium to another.

Data in transit (or data in motion)

Information that is being transmitted between two hosts, such as over a private network or the Internet.

Data in use (or data in processing)

Information that is present in the volatile memory of a host, such as system memory or cache.

Target for data-at-rest encryption, ranging from more granular (file or row/record) to less granular (volume/partition/disk or database).

Transport/communication encryption

Encryption scheme applied to data-in-motion, such as WPA, IPsec, or TLS.

Any method by which cryptographic keys are transferred among users, thus enabling the use of a cryptographic algorithm.

Hash-based Message Authentication Code (HMAC)

A method used to verify both the integrity and authenticity of a message by combining a cryptographic hash of the message with a secret key.

Perfect Forward Secrecy (PFS)

A characteristic of transport encryption that ensures if a key is compromised, the compromise will only affect a single session and not facilitate recovery of plaintext data from other sessions.

A cryptographic technique that provides secure key exchange.

In cryptography, a key that is used within the context of a single session only.

A security countermeasure that mitigates the impact of precomputed hash table attacks by adding a random value to ('salting') each plaintext input.

A technique that strengthens potentially weak input for cryptographic key generation, such as passwords or passphrases created by people, against brute force attacks.

A concept in which an expanding list of transactional records listed in a public ledger is secured using cryptography.

Distributed public record of transactions that underpins the integrity of blockchains.

A technique that essentially 'hides' or 'camouflages' code or other information so that it is harder to read by unauthorized users.

A technique for obscuring the presence of a message, often by embedding information within a file or other entity.

A de-identification method where generic or placeholder labels are substituted for real data while preserving the structure or format of the original data.

A de-identification method where a unique token is substituted for real data.

In authentication design, different technologies for implementing authentication, such as knowledge, ownership/token, and biometric/inherence. These are characterized as something you know/have/are.

Personal identification number (PIN)

A number used in conjunction with authentication devices such as smart cards; as the PIN should be known only to the user, loss of the smart card should not represent a security risk.

Password best practices

Rules to govern secure selection and maintenance of knowledge factor authentication secrets, such as length, complexity, age, and reuse.

A set of rules governing user security information, such as password expiration and uniqueness, which can be set globally.

Software that can suggest and store site and app passwords to reduce risks from poor user choices and behavior. Most browsers have a built-in password manager.

Multifactor authentication (MFA)

An authentication scheme that requires the user to present at least two different factors as credentials; for example, something you know, something you have, something you are, something you do, and somewhere you are. Specifying two factors is known as '2FA.'

Biometric authentication

An authentication mechanism that allows a user to perform a biometric scan to operate an entry or access system. Physical characteristics stored as a digital data template can be used to authenticate a user. Typical features used include facial pattern, iris, retina, fingerprint pattern, and signature recognition.

False Rejection Rate (FRR)

A biometric assessment metric that measures the number of valid subjects who are denied access.

False Acceptance Rate (FAR)

A biometric assessment metric that measures the number of unauthorized users who are mistakenly allowed access.

Crossover Error Rate (CER)

A biometric evaluation factor expressing the point at which FAR and FRR meet, with a low value indicating better performance.

Hard authentication token

Authentication token generated by a cryptoprocessor on a dedicated hardware device. As the token is never transmitted directly, this implements an ownership factor within a multifactor authentication scheme.

A security device similar to a credit card that can store authentication information, such as a user's private key, on an embedded cryptoprocessor.

One-time password (OTP)

A password that is generated for use in one specific session and becomes invalid after the session ends.

Portable HSM with a computer interface, such as USB or NFC, used for multifactor authentication.

Soft authentication token

OTP sent to a registered number or email account or generated by an authenticator app as a means of two-step verification when authenticating account access.

Multifactor authentication scheme that uses ownership and biometric factors, but not knowledge factors.

101-150 Digital Security Concepts Flashcards

Student preview

50 questions

Show all answers

1.

FLASHCARD QUESTION

Front

Self-signed certificate

Back

A digital certificate that has been signed by the entity that issued it, rather than by a CA.

2.

FLASHCARD QUESTION

Front

Certificate signing request (CSR)

Back

A Base64 ASCII file that a subject sends to a CA to get a certificate.

3.

FLASHCARD QUESTION

Front

Common name (CN)

Back

An X500 attribute expressing a host or username, also used as the subject identifier for a digital certificate.

4.

FLASHCARD QUESTION

Front

Subject alternative name (SAN)

Back

A field in a digital certificate allowing a host to be identified by multiple host names/subdomains.

5.

FLASHCARD QUESTION

Front

Wildcard domain

Back

In PKI, a digital certificate that will match multiple subdomains of a parent domain.

6.

FLASHCARD QUESTION

Front

Certificate revocation list (CRL)

Back

A list of certificates that were revoked before their expiration date.

7.

FLASHCARD QUESTION

Front

Online Certificate Status Protocol (OCSP)

Back

Allows clients to request the status of a digital certificate, to check whether it is revoked.

Create a free account and access millions of resources

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

52 questions

Unit 7: Organizational Structure and Change

Flashcard

•

University

37 questions

Grade 11 CAT

Flashcard

•

11th Grade

35 questions

Motion in Two Dimensions

Flashcard

•

12th Grade

46 questions

HGeo Unit 2 Test Review

Flashcard

•

9th Grade - University

47 questions

English-Kazakh Flashcards

Flashcard

•

KG

48 questions

Etapas del desarrollo cognitivo de Piaget

Flashcard

•

University

50 questions

Network Security Flashcard

Flashcard

•

University

50 questions

English-Hebrew Flashcards

Flashcard

•

12th Grade

Popular Resources on Wayground

10 questions

Forest Self-Management

Lesson

•

1st - 5th Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

30 questions

Thanksgiving Trivia

Quiz

•

9th - 12th Grade

30 questions

Thanksgiving Trivia

Quiz

•

6th Grade

11 questions

Would You Rather - Thanksgiving

Lesson

•

KG - 12th Grade

48 questions

The Eagle Way

Quiz

•

6th Grade

10 questions

Identifying equations

Quiz

•

KG - University

10 questions

Thanksgiving

Lesson

•

5th - 7th Grade

Discover more resources for Computers

10 questions

Identifying equations

Quiz

•

KG - University

7 questions

Different Types of Energy

Interactive video

•

4th Grade - University

20 questions

HS2C2 AB QUIZIZZ

Quiz

•

1st Grade - Professio...

14 questions

Homonyms Quiz

Quiz

•

KG - University

16 questions

Parts of a Parabola

Quiz

•

8th Grade - University

10 questions

A Brief History of Geologic Time

Interactive video

•

11th Grade - University

15 questions

Black Friday/Cyber Monday

Quiz

•

9th Grade - University

7 questions

Biomolecules (Updated)

Interactive video

•

11th Grade - University