Test your basic knowledge |

CISSP Crypto Domain

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Looks for patterns in ciphertext to discover the key.






2. Public algorithm - private key.






3. Hardware - software - and policies (security association) -






4. Similar to RSA - very efficient for low end hardware/limited processing power.






5. Set symbol size usually 64 bits






6. Keyword: integrity






7. 32 to 448 bit key - Schneier






8. Mathematical operation performed several times on the same message block






9. Formula is public; used to creat checksums; message digests; or integrity check values






10. Block based - adds padding - same key - same clear = same ciphertext






11. Pro's: key management cons: speed/file size






12. Letters represented by numerical place in the alphabet






13. Study of both cryptography and cryptanalysis






14. Buries a message by taking the least significant bit of evvery byte to carry the message; hide a message in another message. Graphics; sound files; alternated used in corporate espionage






15. Block based - Previous block seeds next blocks key






16. Cipher Feedback Emulates stream cipher data encrypted in smaller units than block size; plaintext pattersn concealed in XOR; previous ciphertext block is encrypted and output produced is conbined with plaintext block using XOR-to produce next ciphert






17. Integrity Check Value-makes the hash with the hash algorithm






18. Based on diffie-hellman - encryption - digital signatures and key exchange.






19. Cannot deny ownership / origination.






20. Relies on finding weaknesses in the hashing algorithm






21. Malled online encryption or traffic flow security- implemented in hardware' encrypts all traffic in a single path






22. Prevent disclosure - privacy






23. Output feedback; emulates stream cipher; similar to CFB except qty XORed; with each plaintext block; IV used as a seed; then keystream used as IV in continuing process






24. Monsidered unbreakable- each pad made up of truly random values; used once; securely distributed- protected at sender and reciever sites






25. Eliptical Curve Cryptography; encryption; dig signatures and key exchange;highest strength per bit of key length; most efficient;160 bit el gamal= 1024 RSA-used in wireless devices use






26. Binary operation that adds bits together; plaintext is XORed with a random keystream to generate cyphertext






27. Keys needed to decrypt cyphertext so an authorized third party can gain access






28. Both parties have same key(kept secret) exchage keys before comms begins; faster than asymmetric crypto; best suited for bulk encryption; N(N-1)/2 is the number of keys needed; File Encryption Key (FEK)






29. Secret; single; conventional; session; shared; private






30. Uses asymmetric to figure out a key - symmetric used for large data encryption.






31. Scrambled version of the alphabet






32. Hides data in images - usually by LSB (least significant bit)






33. Stream based - also uses prior cypher text to seed






34. No plaintext exposure; encrypted at source; VPN; SSL ;SSH






35. Integrity






36. Certificate Authority; registration authority offloads work; validates identity; distributes key; certificate server maintains repository that stores certificates






37. Electronic Code Book Each block encrypted independently; 64 bits at a time; using same key; given message; always same ciphertext; susceptible to plaintext attack






38. Measar cipher






39. Encrypted data-black side






40. Data Encryption Standard (DES) 5 Block Modes; Trple DES runs through it three times; Blowfish; IDEA; RC4; RC5






41. Each pair of entities must receive in secure fashion; requires more overhead than worth; key distro challenging- sender recievermust be on the same sheet






42. Confidentiality - Authentication - Non-Repudiation






43. RSA; El Gamal; ECC; Diffe Hellman; DSA






44. Estimated time resources to break a cryptosystem






45. Large set of possible values used to construct keys






46. 128 bit encryption; on 16 rounds of encryption; key size of 64 bits 8 parity; 56 bits long






47. Rives Shamir; adleman- based on factoring of large prime numbers-encrypt-dig sig- and key exchange variable key length 512 to 4096- strong but slow; 100 times slower than software; 1000-10000 slower than hardware encryption






48. Rearranges bits or bytes






49. Stream cipher; stream algorithm works one bit at a time usually done in Hardware; no memory required; very fast; block cipher; works on blocks of bits; transforms into fixed length blocks; encrypted block by block 64; 128; 256 uses substitution and t






50. Public Key Infrastructure- Developed to provide standards for key generation; authentication; x.509 non used with Pretty Good Privacy; good private good "web of trust"