300-730 · Question #69
What are two functions of ECDH and ECDSA? (Choose two.)
The correct answer is C. digital signature. ECDH and ECDSA are elliptic curve algorithms that serve complementary security functions: ECDSA provides digital signatures and ECDH provides key exchange, covering authentication and secure key establishment respectively.
Question
Options
- Anonrepudiation
- Brevocation
- Cdigital signature
- Dkey exchange
- Eencryption
How the community answered
(28 responses)- A4% (1)
- C89% (25)
- D7% (2)
Why each option
ECDH and ECDSA are elliptic curve algorithms that serve complementary security functions: ECDSA provides digital signatures and ECDH provides key exchange, covering authentication and secure key establishment respectively.
Nonrepudiation is a security property that results from using ECDSA signatures, but it is the outcome of digital signing rather than a distinct cryptographic function performed by the algorithm.
Certificate revocation is managed by external PKI mechanisms such as CRL (Certificate Revocation List) or OCSP and is not a function performed by either ECDH or ECDSA.
ECDSA (Elliptic Curve Digital Signature Algorithm) is specifically designed to generate and verify digital signatures, providing authentication and data integrity using a private key to sign and a corresponding public key to verify. It is the elliptic curve counterpart to RSA signing and is used in TLS certificates, code signing, and IKEv2 authentication.
Neither ECDH nor ECDSA directly encrypts data - ECDH produces a shared secret used to derive symmetric encryption keys, and ECDSA only signs and verifies; bulk encryption is performed by separate symmetric algorithms such as AES.
Concept tested: ECDH key exchange and ECDSA digital signature functions
Source: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.186-5.pdf
Topics
Community Discussion
No community discussion yet for this question.