WGU Course C839 - Intro to Cryptography Exam Graded A+

What type of encryption uses different keys to encrypt and decrypt the message? A Symmetric B Private key C Secure D Asymmetric - ANSWER-D The most widely used asymmetric encryption algorithm is what? A RSA B Vigenere C DES D Caesar Cipher - ANSWER-A Original, unencrypted information is referred to as ____. A text B plaintext C cleantext D ciphertext - ANSWER-B Which of the following is NOT an asymmetric system? A PGP B RSA C SSL D DES - ANSWER-D In order for User A to send User B an encrypted message that only User B can read, User A must encrypt message with which of the following keys? A User A's public key B User A's private key C User B's public key D User B's private key - ANSWER-C The greatest weakness with symmetric algorithms is _____. A They are less secure than asymmetric B The problem of key exchange C They are slower than asymmetric D The problem of generating keys - ANSWER-B Which of the following is generally true about block sizes? A Smaller block sizes increase security B Block sizes must be more than 256 bits to be secure C Block size is irrelevant to security D Larger block sizes increase security - ANSWER-D A _____ is a function that takes a variable-size input m and returns a fixed-size string. A Symmetric cipher B Hash C Asymmetric cipher D Feistel - ANSWER-B Which of the following is a cryptographic protocol that allows two parties to establish a shared key over an insecure channel? A Elliptic Curve B RSA C MD5 D Diffie-Hellman - ANSWER-D A _________ is a digital representation of information that identifies you as a relevant entity by a trusted third party? A Digital Signature B Hash C Ownership stamp D Digest - ANSWER-A What is the standard used by most digital certificates? A X.509 B CRL C RFC 2298 D OCSP - ANSWER-A DES uses keys of what size? A 56 bits B 192 bits C 128 bits D 64 bits - ANSWER-A Which of the following is NOT a key size used by AES? A 512 bits B 128 bits C 192 bits D 256 bits - ANSWER-A Which of the following was a multi alphabet cipher widely used from the 16th century (1553) to the early 20th century (1900s)? A Vigenere B Caesar C Atbash D Scytale - ANSWER-A Which of the following is a substitution cipher used by ancient Hebrew scholars? A Caesar B Vigenere C Scytale D Atbash - ANSWER-D Shifting each letter in the alphabet a fixed number of spaces to the right or left is an example of what? A Bit shifting B Confusion C Multi substitution D Single substitution - ANSWER-D Which of the following most accurately defines encryption? A changing a message so it can only be easily read by the intended recipient B Making binary changes to a message to conceal it C changing a message using complex mathematics D Applying keys to plain text - ANSWER-A If you use substitution alone, what weakness is present in the resulting cipher text? A It is the same length as the original text B It is easily broken with modern computers. C It is too simple. D Because it maintains letter and word frequency. - ANSWER-D _____ uses at least two different shifts, changing the shift with different letters in the plain text. A Atbash B multi-alphabet encryption C Scytale D Caesar cipher - ANSWER-B ____ was designed to provide built in cryptography for the clipper chip. A Blowfish B Skipjack C GOST D 3DES - ANSWER-B Which of the following uses an 80 bit key on 64 bit blocks? A Twofish B AES C Skipjack D DES - ANSWER-C With _____, the message is divided into blocks and each block is encrypted separately. This is the most basic mode for symmetric encryption. A Electronic codebook (ECB) B Cipher-block chaining (CBC) C Cipher feedback (CFB) D Output feedback (OFB) - ANSWER-A Which of the following is an example of an unbalanced Feistel? A 3DES B Skipjack C Twofish D AES - ANSWER-B This process is done by having each block of plaintext is XORed with the previous ciphertext block before being encrypted. A Output feedback (OFB) B Cipher-block chaining (CBC) C Electronic codebook (ECB) D Cipher feedback (CFB) - ANSWER-B The process wherein the ciphertext block is encrypted then the ciphertext produced is XOR'd back with the plaintext to produce the current ciphertext block is called what? A Output feedback (OFB) B Cipher-block chaining (CBC) C Cipher feedback (CFB) D Electronic codebook (ECB) - ANSWER-C This is a method for turning a block cipher into a stream cipher by generating a keystream block, which are then XORed with the plaintext blocks to get the ciphertext. A Cipher feedback (CFB) B Electronic codebook (ECB) C Output feedback (OFB) D Cipher-block chaining (CBC) - ANSWER-C Which of the following modes can be used to turn a block cipher into a stream cipher? A Propagating cipher-block chaining (PCBC) and Electronic codebook (ECB) B Counter Mode (CTR) and Propagating cipher-block chaining (PCBC) C Electronic codebook (ECB) and Output feedback (OFB) D Output feedback (OFB) and Counter Mode (CTR) - ANSWER-D A fixed-size pseudorandom number that is fed into a symmetric cipher to increase randomness is called what? A IV B Key C Chain D Salt - ANSWER-A A number that is used only one time then discarded is called what? A Nonce B Chain C Salt D IV - ANSWER-A Which of the following is a stream cipher that uses variable length key from 1 to 256 bytes? A RC4 B AES C DESx D DES - ANSWER-A This algorithm was published by the German engineering firm Seimans in 1993. It is a software based stream cipher using Lagged Fibonacci generator along with a concept borrowed from the shrinking generator ciphers. A RC4 B Blowfish C FISH D Twofish - ANSWER-C Which of the following is NOT required for a hash? A Minimum key length of 256 bits B Variable-length input, fixed-length output C Non-reversible D Few collisions - ANSWER-A A ______ refers to a situation where two different inputs yield the same output. A Substitution B Convergence C Collision D Transposition - ANSWER-C What is a salt? A Key rotation B Random bits intermixed with a hash to increase randomness and reduce collisions. C Random bits intermixed with a symmetric cipher to increase randomness and make it more secure. D Key whitening - ANSWER-B RFC 1321 describes what hash? A RIPEMD B SHA1 C GOST D MD5 - ANSWER-D What size block does FORK256 use? A 256 B 128 C 512 D 64 - ANSWER-C In 1977 researchers at MIT described what asymmetric algorithm? A RSA B AES C DH D EC - ANSWER-A What is the formula (M^e)(%n) related to? A Encrypting with EC B Generating Mersenne primes C Decrypting with RSA D Encrypting with RSA - ANSWER-C Which of the following equations is related to EC? A P = Cd%n B Me%n C y2 = x3 + Ax + B D Let m = (p-1)(q-1) - ANSWER-C U.S. Patent 5,231,668 and FIPS 186 define what algorithm? A AES B RSA C Elliptic Curve (EC) D Digital Signature Algorithm (DSA) - ANSWER-D What is X.509? A The standard for PGP certificates B The standard for encrypting email C The standard for FIPS 186 D The standard for digital certificates - ANSWER-D What is contained in a CRL? A Keys for RSA B New certificates C Revoked certificates D Keys for AES - ANSWER-C What does the Online Certificate Status Protocol (OCSP) provide? A Revoked certificates B Hashing C VPN connectivity D Encryption - ANSWER-A In terms of cryptanalysis, what does it mean to break a cipher? A finding a method to decrypt a message that is at least twice as efficient as brute force B trying every possible key until you can decrypt the message C deploying an algorithm that uses a 228 bit key D finding any method to decrypt the message that is more efficient than brute force - ANSWER-D An authentication method that periodically re-authenticates the client by establishing a hash that is then resent from the client is called ______. A PAP B CHAP C SPAP D EAP - ANSWER-B What is a TGS? A The server that grants Kerberos tickets B protocol for encryption C protocol for key exchange D The server that escrows keys - ANSWER-A What is Kerchoff's principle? A A minimum key size of 256 bits is necessary for security. B Both algorithm and key should be kept secret. C A minimum of 15 rounds is needed for a Feistel cipher to be secure. D Only the key needs to be secret, not the actual algorithm. - ANSWER-D Which of the following is a fundamental principle of cryptography that holds that the algorithm can be publically disclosed without damaging security? A Babbage's principle B Kerkchoff's principle C Vigenere's principle D Shamir's principle - ANSWER-B A process that puts a message into the least significant bits of a binary file is called what? A Symmetric cryptography B Masking C Steganography D Asymmetric cryptography - ANSWER-C If you wished to see a list of revoked certificates from a CA, where would you look? A CRL B CA C RFC D RA - ANSWER-A Which of the following is generally true about block ciphers? A Secret block ciphers should be trusted. B Block ciphers permute the bits of the input plaintext. C The plaintext and ciphertext are always the same size. D A block cipher is an encryption function for variable-size blocks of data. - ANSWER-C What does the OCSP protocol provide? A encryption B VPN connectivity C hashing D a real time protocol for verifying certificates - ANSWER-D U.S. encryption standard that replaced DES. Block symmetric cipher that uses 128-bit block sizes and various key lengths (128, 192, 256). - ANSWER-AES DES, 3DES, SHA, AES (some AES implementations are Type I) - ANSWER-Class 3 Algorithms Encryption method where the sender and receiver use an instance of the same key for encryption and decryption purposes. - ANSWER-Symmetric Block symmetric algorithm chosen by NIST as an encryption standard in 1976. It uses a 56-bit true key bit size, 64-bit block size, and 16 rounds of computation. - ANSWER-Data Encryption Standard (DES) technical specification indicating how multimedia data and e-mail binary attachments are to be transferred. - ANSWER-Multipurpose Internet Mail Extensions (MIME) Valid data transmission is maliciously or fraudulently repeated to allow an entity gain unauthorized access. - ANSWER-Replay Attack protocol suite provides a method of setting up a secure channel for protected data exchange between two devices. - ANSWER-Internet Protocol Security (IPSec) Juniper (block cipher) MAYFLY (asymmetric) FASTHASH (hashing) WALBURN (high bandwith link encryption) PEGASUS (satellite telemetry) - ANSWER-Class 1 Algorithms Component of a PKI that creates and maintains digital certificates throughout their life cycles. - ANSWER-Certificate Authority Uses public key encryption and provides data encryption, server authentication, message integrity, and optional client authentication. It is currently at version 3.0. - ANSWER-Secure Sockets Layer (SSL) Manipulating individuals so that they will divulge confidential information, rather than by breaking in or using technical cracking techniques. - ANSWER-Social engineering attack Cryptanalysis attack where the attacker is assumed to have access only to a set of ciphertexts. - ANSWER-Ciphertext-only attack servers and software signing, for which independent verification and checking of identity and authority is done by issuing CA - ANSWER-Class 3 Certificates it should be impossible for any attacker to calculate, or otherwise guess, from any given subsequence, any previous or future values in the sequence - ANSWER-BSI Criteria K3 states Cryptanalysis attack that uses identified statistical patterns. - ANSWER-Statistical attack organizations for which proof of identity is required - ANSWER-Class 2 Certificates Block symmetric cipher that uses a 128-bit key and 64-bit block size. - ANSWER-International Data Encryption Algorithm (IDEA) individuals, and intended for email - ANSWER-Class 1 Certificates A form of cryptanalysis applicable to symmetric key algorithms that was invented by Eli Biham and Adi Shamir. The examination of differences in an input and how that affects the resultant difference in the output. - ANSWER-Differential cryptanalysis Cryptanalysis attack where the attacker is assumed to have access to sets of corresponding plaintext and ciphertext. - ANSWER-Known plaintext attack Carries out real-time validation of a certificate and reports back to the user whether the certificate is valid, invalid, or unknown. OCSP checks the CRL that is maintained by the CA. - ANSWER-Online Certificate Status Protocol (OCSP) What is the formula Me%n related to? - ANSWER-Encrypting with RSA Plain-text is equal to the encryption function (E) with the key (k) and the ciphertext (c) being passed as parameters to that function - ANSWER-P= E(k,c) Symmetric decryption Not certified for government use - ANSWER-Class 4 algorithms 64 bit algorithm operating at 56 bits with an 8 bit parity block - ANSWER-DES AH is the authenticating protocol, and ESP is an authenticating and encrypting protocol that uses cryptographic mechanisms to provide source authentication, confidentiality, and message integrity. - ANSWER-Authentication Header (AH) and Encapsulating Security Payload (ESP). developed as a Russian national standard and produced fixed length outputs of 256 bits - ANSWER-GOST A measure of the uncertainty associated with a random variable - ANSWER-Entropy Attempts to make the statistical frequencies of the ciphertext and actual key as complex as possible - ANSWER-Confusion Like AES, Serpent has a block size of 128 bits and can have a key size of 128, 192, or 256 bits. The algorithm is also a substitution-permutation network like AES. It uses 32 rounds working with a block of four 32-bit words. Each round applies one of eight 4-bit to 4-bit S-boxes 32 times in parallel. Designed by Ross Anderson, Eli Biham, and Lars Knudsen. - ANSWER-Serpent What is the difference between Secure HTTP (SHTTP) and HTTP Secure (HTTPS)? - ANSWER-S-HTTP is a technology that protects each message sent between two computers, while HTTP