Crypto

Question 1

Security through obscurity

Answer 1

Code obfuscation, steganography, SSID broadcast suppression, substitution ciphers

Question 2

PFS (Perfect Forward Secrecy)

Answer 2

Designed to strengthen the security of session keys

Question 3

Session Key features

Answer 3

used during single session, symmetric key

Question 4

Confusion

Answer 4

Output of cryptographic function should be considerably different from the corresponding plain text

Question 5

Digital signatures provide…

Answer 5

integrity, authentication, non-repudiaiton

Question 6

Weak/deprecated crypto solutions

Answer 6

WEP, SSL, DES

Question 7

ECC (Elliptic Curve Crypto)

Answer 7

Asymmetric, low processing, suitable for small devices

Question 8

Means for providing randomization during encryption

Answer 8

Cryptographic nonce, salting, initialization vector (IV)

Question 9

IV (Initialization Vector)

Answer 9

pseudo-random data used in combination with WEP & SSL key

Question 10

Salt

Answer 10

Additional input that increases password complexity and provides better protection against brute-force, dictionary, and rainbow table attacks (also pseudo-data added to passwords before hashing)

Question 11

Asymmetric Encryption

Answer 11

Public-key paired with a private key

Question 12

GCM (Galois/Counter Mode)

Answer 12

Provides data integrity and confidentiality

Question 13

ECB (Electronic Codebook)

Answer 13

Simplest/weakest kind of encryption

Question 14

Symmetric encryption

Answer 14

session-key and secret-key

Question 15

Obfuscation methods

Answer 15

Steganography, XOR cipher, ROT13

Question 16

Bcrypt & PBKDF2

Answer 16

Key-stretching algorithms

Question 17

Hashing algorithms

Answer 17

MD5, RIPEMD, HMAC, SHA

Question 18

Diffie-Hellman

Answer 18

Commonly used asymmetric algorithm for exchange of symmetric keys

Question 19

DSA

Answer 19

Cryptographic standard for digital signatures

Question 20

Symmetric ciphers

Answer 20

RC4, DES, RSA, Blowfish, 3DES, Twofish

Question 21

AES features

Answer 21

symmetric, with 128, 192, and 256bit keys, block cipher

Question 22

Countermeasures against replay attacks

Answer 22

IPsec, Kerberos, and CHAP

Question 23

A cryptographic downgrade attack

Answer 23

POODLE

Question 24

Rainbow Table entry looks like…

Answer 24

Hash/password

Question 25

Cryptographic attack where the attacker has access to both the plaintext and its encrypted version

Answer 25

KPA (Known-plaintext attack)

Question 26

Birthday attacks rely on…

Answer 26

probability theory