Advanced Cryptography

The Rail Fence Cipher is a cipher that uses columns. The plaintext is written downwards and starts a new column when the bottom is reached. This technique used in the Rail Fence Cipher is an example of:

• a product cipher

• a stream cipher

• substitution

• transposition

Evaluate the following modulo math problem.

20 + (35 mod 11)

• 3

• 20

• 22

• 26

Protecting data by hashing the data with a hashing function addresses which part(s) of the CIA triad?

• Confidentiality only

• Integrity Only

• Availability only

• Confidentiality and Integrity

• Confidentiality and Availability

A primary requirement for a good cryptographic hash function is that the function should not have collisions. A collision in a hash function is when:

• there are few inputs, but a lot of outputs.

• two inputs map to the same output

• two outputs come from the same input

• there are few outputs, but a lot of inputs

A hash function takes an input of any length and converts it into an output of a fixed length. What term is used for this output?

• field

• password

• digest

• message

Which of the following would be the most secure method when storing passwords in a database?

• Passwords are hashed

• Passwords are saved as plaintext.

• Passwords are both salted and hashed.

• Passwords are encrypted using an algorithm.

What is the name for the issuer of an SSL certificate?

• a certificate issuer

• a certificate authority

• a root authority

• a man in the middle

Which of the following mathematical expressions would produce the most secure encryption when used in the encryption algorithm?

• value^22

• value * 22

• value / 22

• value % 22

Which of the following salting procedures will produce the most secure encryption?

• using a 3 character salt

• create a Salt based on username

• Use the same salt for every password

• Use a randomized salt for every password.

Man-in-the-middle attacks affect which part(s) of the CIA triad?

• Confidentiality only

• Integrity only

• Availability only

• Confidentiality and Integrity

• Confidentiality and Availability