Test your basic knowledge |

CISSP Crypto Domain

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Carlisle Adams and Stafford Tavares; CAST 128 64 bit block cipher-uses keys between 48 and 128 bit lengths 12 to 16 rounds of operations CAST 256 uses 48 rounds; of 128; 192; 160; 224; 256






2. Hash Mess Auth Code (512bit MD5; SHA-1); calculated using a hash function with secret key- shared key appended to data shared faster than DES CBC- used in IPSEC SSL/TLS and SSH






3. Authenticity - integrity - digital signatures - storing passwords.






4. Scrambled version of the alphabet






5. key storage;escrow;archival;recovery agend;multiple key pairs






6. Electronic Code Book Each block encrypted independently; 64 bits at a time; using same key; given message; always same ciphertext; susceptible to plaintext attack






7. Prove knowledge of a fact to a third party without revealing the fact itself






8. Buries a message by taking the least significant bit of evvery byte to carry the message; hide a message in another message. Graphics; sound files; alternated used in corporate espionage






9. 128 bit encryption; on 16 rounds of encryption; key size of 64 bits 8 parity; 56 bits long






10. 128 bit digest






11. Rearrances the bits characters or character blocks






12. Stream based - errors do not propagate across blocks






13. Data in readable format- red side






14. Digital signature standard; performs integrity by SHA; uses DSA; RSA;Elyp CurveDSA






15. Formula is public; used to creat checksums; message digests; or integrity check values






16. Keyword: integrity






17. Provided by mixing key values during repeated rounds of encryption






18. One time pad - random key - one use - unbreakable






19. Cipher Feedback Emulates stream cipher data encrypted in smaller units than block size; plaintext pattersn concealed in XOR; previous ciphertext block is encrypted and output produced is conbined with plaintext block using XOR-to produce next ciphert






20. 256 or 512-bit digest






21. Estimated time resources to break a cryptosystem






22. Process of properly destroying keys at end of userful loife






23. Both parties have same key(kept secret) exchage keys before comms begins; faster than asymmetric crypto; best suited for bulk encryption; N(N-1)/2 is the number of keys needed; File Encryption Key (FEK)






24. Binary operation that adds bits together; plaintext is XORed with a random keystream to generate cyphertext






25. RC(x) - 32 - 64 - 128 bit blocks - key max at 2048 bits






26. Message hidden within larger context.






27. Encryption - decryption - signing - verifying






28. Different keys for encryption and decryption; two keys private and public Encrypt with private- unencrypt with privateor encrypt with public- decrypt with private. Use of private ensures non repudiation; without confidentiality-becomes the digital si






29. Block based - Previous block seeds next blocks key






30. Symmetric for Bulk Encrypt; assym for key encapsulation- used in SSL; Email; key exchange






31. Large set of possible values used to construct keys






32. variable block and key sizes 128; 192; 256; uses a variable number of rounds; has low memory requirements; easy to defend against timing attacks; implemented in software; hardware is costly.






33. Based on Dif Hel; provides encrypt; dig sig; and key exchange; discrete logarithms-easy to reverse engineer; main drawback is performance- slower than other algorithms






34. Uses asymmetric to figure out a key - symmetric used for large data encryption.






35. Cannot deny ownership / origination.






36. No plaintext exposure; encrypted at source; VPN; SSL ;SSH






37. Spartans - wrapped around rod.






38. Set symbol size usually 64 bits






39. Message Authentication Code - Symmetric enc + Hash






40. Setting policies; protecting keys; key recovery; responding to key compromise; keys long enough to prevent attack; cryptoperiod: key lifetimes






41. Integrity






42. Storage of keys and certs for extended period of time-normally performed by CA a trusted third party; or key holder






43. Rearranges bits or bytes






44. Science of protecting information by encoding it






45. Public algorithm - private key.






46. Provided by mixing up the location of plaintext throughout the cipher






47. Instance when two keys keys generate the same ciphertext from same plaintext






48. Science of breakin the code






49. Replaces bits characters and block s with differecnt values






50. NIST and NSA - 160 bit digest