NEW
Font size
WorksheetsEncryption/Decryption
Total questions: 40
Worksheet time: 19mins
Which of the following best describes the fundamental mechanism by which a digital signature ensures non-repudiation? A. The sender encrypts the entire message with their public key, and the recipient decrypts it with their private key.
The sender encrypts the entire message with their public key, and the recipient decrypts it with their private key.
The sender creates a hash of the message and encrypts this hash with their private key; the recipient uses the sender's public key to decrypt the hash and verifies it against their own calculated hash
The recipient encrypts the message with the sender's public key, and the sender decrypts it with their private key.
A trusted third party directly authenticates both the sender and recipient before communication begins.
Hashing primarily serves to encrypt data, making it unreadable to unauthorized parties, thereby ensuring confidentiality.
True
False
In the context of hashing functions, what is the 'Input Key'?
The cryptographic algorithm used to convert data.
The fixed-length string of letters and numbers produced by the hash function.
The original data or message that is processed by the hash function.
A data structure used for storing hash values.
MD5 is explicitly recommended as a secure hashing algorithm for new applications requiring strong cryptographic integrity, as indicated in the presentation's list of common algorithms.
True
False
Digital signatures find their practical application across various industries. Which of the following is NOT listed as a key application?
Decentralized finance (DeFi)
Healthcare records
Supply chain management
Real-time video conferencing encryption
Which of the following statements accurately differentiates asymmetric cryptography from symmetric cryptography in terms of key management and security services provided?
Asymmetric cryptography uses a single shared key for both encryption and decryption, providing only confidentiality.
Symmetric cryptography requires two distinct keys, offering confidentiality, authenticity, and non-repudiation.
Asymmetric cryptography uses separate public and private keys, providing confidentiality, authenticity, and non-repudiation.
Symmetric cryptography is slower for large data transfers, whereas asymmetric cryptography is faster.
One of the key challenges of asymmetric cryptography is its slow speed, making it generally less ideal for encrypting large volumes of data compared to symmetric methods.
True
False
In a mobile chat system utilizing both symmetric and asymmetric cryptography, what is the typical role of asymmetric cryptography at the start of a conversation?
To encrypt the ongoing contents of the conversatio
To verify the identity of participants.
To generate a single shared key for bulk data encryption.
To reduce the size of the ciphertext for faster transmission.
For symmetric key encryption, the size of the ciphertext produced is always larger than the original plaintext.
True
False
Which application listed in the presentation primarily uses asymmetric cryptography for confirming identity to authorize transactions, rather than for bulk data encryption?
Banking (encrypting credit card information)
Data storage (encrypting data on a device)
Blockchain (confirming identity for cryptocurrency transactions)
Mobile chat systems (encrypting ongoing conversation contents)
According to Fortinet, what is the primary objective of cryptography?
To increase data accessibility for all users.
To convert data into a fixed-length string for storage efficiency.
To conceal data so that only the intended recipient can decipher it.
To openly share information across public networks.
Cryptanalysis exclusively focuses on developing new cryptographic algorithms to enhance data security.
True
False
Which of the following is NOT listed as a main element of a cryptosystem, according to NordVPN?
Encryption
Decryption
Key management
Digital Signature
An asymmetric cryptosystem is also known as a public key cryptosystem, and it uses the same key for both encryption and decryption.
True
False
Which type of cryptanalytic attack involves an attacker having access to both the plaintext and its corresponding ciphertext, enabling them to derive the encryption key or algorithm?
Ciphertext-Only Analysis (COA)
Chosen-Plaintext Analysis (CPA)
Brute-Force Attack
Known-Plaintext Analysis (KPA)
According to Mollin (2001), cryptography is primarily the study of mathematical techniques related to which aspects of information security?
Network topology and server administration.
Software development and database management.
Hardware security modules and physical access control.
None of the choices is/are the correct.
Cryptography ensures data confidentiality by making information accessible only to those authorized to have access, typically through the use of hashing.
False
True
In the context of application-to-application communication, which security requirement guarantees that data has not been altered, either accidentally or maliciously, primarily through the use of hash functions?
Confidentiality
Integrity
Non-repudiation
Authentication
Non-repudiation in secure communication primarily ensures that a sender cannot deny having sent a message, and it is often achieved using encryption keys.
True
False
Cryptography is crucial for underpinning various modern technologies. Which of the following is explicitly mentioned as a technology underpinned by cryptography?
Social media marketing
Online banking
Graphic design software
Cloud computing infrastructure development
An X.509 certificate contains several key pieces of information. Which of the following attributes is explicitly listed as identifying who issued the certificate?
Subject Name
Serial Number
Issuer Name
Signature Algorithm
The "Signature Value" in an X.509 certificate refers to the digital signature created by the certificate's subject to prove their identity to the Certificate Authority.
True
False
What is the primary role of a Certificate Authority (CA) within the Public Key Infrastructure (PKI) environment as described in the presentation?
To host websites and provide encrypted communication channels directly.
To develop new encryption algorithms for public use.
To act as a trusted third party that issues digital certificates, linking an identity to a public key.
To manage private keys for users and organizations.
Digital certificates are primarily used to encrypt data so that only the intended recipient can read it, thus ensuring confidentiality.
True
False
Which application of digital certificates is highlighted as ensuring that a connection to websites like banking sites or online stores is encrypted, indicated by a padlock in the browser's address bar?
Digitally signing emails
Encrypting emails for confidentiality
Securing web connections (HTTPS/SSL/TLS)
Developers signing their software
In the context of e-commerce, which core security service is primarily achieved by hash functions, ensuring that data is not altered during transit?
Confidentiality
Authentication
Integrity
Non-repudiation
One of the challenges of trust and authenticity in public networks discussed is the limitation of Public Key Infrastructure (PKI) due to issues with compromised Certificate Authorities (CAs).
True
False
What is the primary purpose of Secure Key Exchange protocols, such as Diffie-Hellman, in electronic transactions?
To encrypt credit card information directly.
To provide proof of transaction origin.
To enable the safe sharing of cryptographic keys.
To verify the authenticity of websites and users.
A "Man-in-the-Middle (MITM) Attack" in public networks is characterized by attackers simply observing communications without altering them.
True
False
Which of the following best describes the function of digital signatures in securing electronic transactions, as stated in the presentation?
To protect data from unauthorized access.
To verify transaction authenticity and prevent repudiation.
To establish encrypted sessions.
To enable safe key sharing.
What is the key difference in trust models between PGP's "Web of Trust" and S/MIME's reliance on a Public Key Infrastructure (PKI)?
PGP uses centralized servers for key management, while S/MIME uses peer-to-peer verification.
PGP relies on individual users vouching for others, whereas S/MIME depends on trusted Certificate Authorities.
PGP integrates directly with email clients, while S/MIME is a standalone application.
PGP focuses on data integrity, while S/MIME prioritizes confidentiality.
SSL (Secure Sockets Layer) is the current and most widely recommended encryption-based internet protocol for secure web communications.
True
False
Which cryptographic implementation was specifically developed by Visa and Mastercard in the late 1990s to secure credit and debit card payments over open networks like the internet?
SSL/TLS
PGP
S/MIME
SET
One of the limitations listed for S/MIME is its complexity in certificate management and potential interoperability issues with external parties.
True
False
PGP (Pretty Good Privacy) utilizes a hybrid cryptosystem. What does this imply about its cryptographic approach?
It exclusively uses symmetric-key cryptography for all operations.
It combines symmetric-key and public-key cryptography.
It relies solely on hash functions for data integrity.
It uses a single key for both encryption and decryption.
According to Kerckhoffs’s Principle, a foundational concept in modern cryptography, where should the security of a cryptosystem primarily reside?
In the secrecy of the cryptographic algorithm used.
In the physical security of the computing environment.
In the secrecy of the key, not the secrecy of the algorithm itself.
In the complexity of the encryption and decryption processes.
A strong cryptosystem must ensure data integrity by preventing unauthorized access through encryption, where plaintext is transformed into ciphertext.
True
False
Authentication mechanisms in a cryptosystem confirm the identity of parties involved and can utilize digital certificates and PKI to prevent impersonation or spoofing.
True
False
What cryptographic technique is commonly employed to achieve non-repudiation, ensuring that a party cannot later deny having sent a message or committed an action?
Message Authentication Codes (MACs)
Cryptographic hash functions
Digital signatures
Challenge-response protocols
If integrity mechanisms are absent or compromised in a cryptosystem, what is a potential consequence highlighted in the presentation?
Increased computational overhead for encryption.
Inability to establish secure communication channels
Attackers manipulating messages undetected, leading to data corruption or fraud.
Exposure of cryptographic keys to brute-force attacks.
