OWASP Top 10

What does `nonrepudiation` mean?

• Has the data changed?

• What can you do?

• Who did what?

• Who created this data?

What are the cryptographic hash function properties?

• Reversible function change

• Deterministic behavior

• Unfixed hash values

• One-way function change

• Fixed-length hash values

What hash functions are safe from the `hashlib` package?

• SHA-1

• BLAKE2

• MD5

• SHA-2

• SHA-3

Who is the winner of the 2015 Password Hashing Competition?

• Argon2

• BLAKE2

• scrypt

• SHA-3

Which hash function you should use if you need to hash large amounts of data?

• SHA-2

• Argon2

• bcrypt

• BLAKE2

Which package you shouldn’t use for a key generation?

• os

• random

• secrets

It is safe to use `==` to compare 2 hash values.

• True

• False

What block cipher encryptions are safe to use?

• Rijndael

• Blowfish

• Advanced Encryption Standard (AES)

• Triple DES (3DES)

• Twofish

Which terms are correct for the peppering?

• The pepper should be stored in the database.

• The pepper should be stored in the secrets vault.

• The pepper should be shared between stored passwords.

• The pepper should be unique like a salt.

What package you should use to parse xml?

• xml

• defusedxml