CISSP Domain 3 – Security Architecture and Engineering
(Questions and Answers)
Algorithm
A mathematical function used in the processes of encryption and decryption. Algorithms may
range from very simple to extremely complex and can also be defined as a set of instructions that
govern how encryption and decryption are performed.
Asymmetric Encryption
A cryptographic process that employs different keys for encryption and decryption.
Determining the decryption key from the encryption key, plaintext-ciphertext pairs, or
algorithmic knowledge is computationally infeasible.
Block Mode Encryption
An encryption method that processes fixed-length blocks of plaintext symbols as the unit of
encryption.
Ciphertext
The transformed version of a plaintext message that is unreadable to anyone except authorized
recipients. In essence, it represents the secret form of a message.
Collision
A condition in which a hash function produces the same output value for two distinct inputs,
meaning two different messages yield identical message digests.
Crime Prevention Through Environmental Design (CPTED)
An architectural strategy that focuses on designing physical environments to discourage
criminal behavior by incorporating passive security features.
Cryptanalysis
The discipline that studies methods for breaking or circumventing cryptographic protections and
information security services.
Cryptographic Hash (or Cryptographic Hash Function)
A function that converts input plaintext into a fixed-length, unique value called a hash or hash
value. Strong cryptographic hashes are one-way functions—meaning it is computationally
, impractical to reconstruct the original plaintext from the hash and algorithm alone. Message
digests are examples of such hashes.
Cryptography
The study and application of techniques for securing the confidentiality and integrity of
messages, files, or data, typically by transforming their content into an unreadable form.
Cryptosystem
A comprehensive system comprising hardware, software, communication protocols, and
operational procedures that enable secure data exchange through cryptographic means. It
includes algorithms, keys, and key management functions.
Cryptovariable(s)
Parameters intrinsic to a specific cryptographic algorithm and its implementation, such as block
size, key length, and the number of rounds.
Decoding
The process of converting encoded information back into its original plaintext form.
Decryption
The reverse operation of encryption. It involves transforming ciphertext back into plaintext
using the appropriate decryption key and algorithm. In symmetric systems, the same key is used
for both encryption and decryption; in asymmetric systems, different keys are used.
Encoding
The conversion of data into another format using a predefined code. Unlike encryption,
encoding does not conceal the meaning of the message and can be decoded by anyone familiar
with the code.
Encryption
The process of converting plaintext into ciphertext to protect information confidentiality. The
term is often used interchangeably with enciphering.
Encryption System
A complete framework consisting of algorithms, hardware, software, and procedures that
collectively enable encryption and decryption operations.
(Questions and Answers)
Algorithm
A mathematical function used in the processes of encryption and decryption. Algorithms may
range from very simple to extremely complex and can also be defined as a set of instructions that
govern how encryption and decryption are performed.
Asymmetric Encryption
A cryptographic process that employs different keys for encryption and decryption.
Determining the decryption key from the encryption key, plaintext-ciphertext pairs, or
algorithmic knowledge is computationally infeasible.
Block Mode Encryption
An encryption method that processes fixed-length blocks of plaintext symbols as the unit of
encryption.
Ciphertext
The transformed version of a plaintext message that is unreadable to anyone except authorized
recipients. In essence, it represents the secret form of a message.
Collision
A condition in which a hash function produces the same output value for two distinct inputs,
meaning two different messages yield identical message digests.
Crime Prevention Through Environmental Design (CPTED)
An architectural strategy that focuses on designing physical environments to discourage
criminal behavior by incorporating passive security features.
Cryptanalysis
The discipline that studies methods for breaking or circumventing cryptographic protections and
information security services.
Cryptographic Hash (or Cryptographic Hash Function)
A function that converts input plaintext into a fixed-length, unique value called a hash or hash
value. Strong cryptographic hashes are one-way functions—meaning it is computationally
, impractical to reconstruct the original plaintext from the hash and algorithm alone. Message
digests are examples of such hashes.
Cryptography
The study and application of techniques for securing the confidentiality and integrity of
messages, files, or data, typically by transforming their content into an unreadable form.
Cryptosystem
A comprehensive system comprising hardware, software, communication protocols, and
operational procedures that enable secure data exchange through cryptographic means. It
includes algorithms, keys, and key management functions.
Cryptovariable(s)
Parameters intrinsic to a specific cryptographic algorithm and its implementation, such as block
size, key length, and the number of rounds.
Decoding
The process of converting encoded information back into its original plaintext form.
Decryption
The reverse operation of encryption. It involves transforming ciphertext back into plaintext
using the appropriate decryption key and algorithm. In symmetric systems, the same key is used
for both encryption and decryption; in asymmetric systems, different keys are used.
Encoding
The conversion of data into another format using a predefined code. Unlike encryption,
encoding does not conceal the meaning of the message and can be decoded by anyone familiar
with the code.
Encryption
The process of converting plaintext into ciphertext to protect information confidentiality. The
term is often used interchangeably with enciphering.
Encryption System
A complete framework consisting of algorithms, hardware, software, and procedures that
collectively enable encryption and decryption operations.
