Section 8.80 Cryptographic Attacks

Question 1

Cryptographic Attacks

Answer 1

Techniques and strategies that adversaries employ to exploit vulnerabilities in cryptographic systems with the intent to compromise the confidentiality, integrity, or authenticity of data

Question 2

Downgrade Attacks

Answer 2

Force systems to use weaker or older cryptographic standards or protocols

■ Exploit known vulnerabilities or weaknesses in outdated versions

■ Countermeasures include phasing out support for insecure protocols and version-intolerant checks

■ Example: POODLE attack on SSL 3.0

Question 3

Collision Attacks

Answer 3

Find two different inputs producing the same hash output

■ Undermine data integrity verification relying on hash functions

■ Vulnerabilities in hashing algorithms, e.g., MD5, can lead to collisions

■ Birthday Paradox or Birthday Attack: The probability that two distinct inputs, when processed through a hashing function, will produce the same output, or a collision

Question 4

Quantum Computing Threat

Quantum computing

Answer 4

● A computer that uses quantum mechanics to generate and manipulate quantum bits (Qubits) in order to access enormous processing powers.

● Uses quantum bits (qubits) instead of using ones and zeros

Question 5

Quantum Computing Threat

Quantum Communication

Answer 5

A communications network that relies on qubits made of photons (light) to send multiple combinations of ones and zeros simultaneously which results in tamper resistant and extremely fast communications

Question 6

Quantum computing is designed for very specific use cases

Answer 6

● Complex math problems

● Trying to do something like the modeling of an atom or atomic structure

Question 6

Qubit

Answer 6

A quantum bit composed of electrons or photons that can represent numerous combinations of ones and zeros at the same time through superposition

● Enable simultaneous processing of multiple combinations

Question 7

Quantum Threat

Answer 7

Threat to traditional encryption algorithms (RSA, ECC) by rapid factorization of large prime numbers

Question 8

Post-quantum cryptography

Answer 8

● A new kind of cryptographic algorithm that can be implemented using today’s classic computers but is also impervious to attacks from future quantum computers

● Aims to create algorithms resistant to quantum attacks

● First method to create post-quantum cryptography is to increase the

• key size
  ○ Increases the number of permutations that are needed to be
  brute-forced
• Second method is to create something like lattice-based cryptography
  and super singular isogeny key exchange

Question 9

NIST selected four post-quantum cryptography standards

Answer 9

● CRYSTALS-Kyber - general encryption needs

● Digital signatures
○ CRYSTALS-Dilithium
○ FLACON
○ SPHINCS+