RSA

Question 1

What are the 3 common weakness enumerations (CWE)?

Answer 1

1) CWE-259: Use of Hard-coded passwords
2) CWE-327: Broken or risky crypto algorithm
3) CWE- 331: Insufficient Entropy

Question 2

What are the main crypto ingredients?

Answer 2

1) Strong crypto algorithm
2) Secure Hash Functions
3) Strong Random Number Generators

Question 3

What is considered secure?

Answer 3

1) Strong encryption algorithm e.g. AES or RSA
2) Key used must be crypto secure RNG
3) Protocol to send message must be robust, no leakage, no weakened entropy

Question 4

How does MAC work?

Answer 4

1) Sender and receiver share a secret key k

2) Compute MAC h(m,K) from message m and secret key K using a suitable function h

3) To authenticate a message, the receiver needs the secret key by the sender