nerdexam
EC-Council

312-50V10 · Question #76

Which of the following cryptography attack is an understatement for the extraction of cryptographic secrets (e.g. the password to an encrypted file) from a person by a coercion or torture?

The correct answer is D. Rubber Hose Attack. A rubber hose attack refers to extracting cryptographic secrets through physical coercion or torture rather than mathematical cryptanalysis - bypassing encryption entirely by targeting the human who holds the key.

Cryptography

Question

Which of the following cryptography attack is an understatement for the extraction of cryptographic secrets (e.g. the password to an encrypted file) from a person by a coercion or torture?

Options

  • AChosen-Cipher text Attack
  • BCiphertext-only Attack
  • CTiming Attack
  • DRubber Hose Attack

How the community answered

(39 responses)
  • A
    3% (1)
  • B
    3% (1)
  • D
    95% (37)

Why each option

A rubber hose attack refers to extracting cryptographic secrets through physical coercion or torture rather than mathematical cryptanalysis - bypassing encryption entirely by targeting the human who holds the key.

AChosen-Cipher text Attack

A chosen-ciphertext attack involves an attacker submitting selected ciphertexts to a decryption oracle and analyzing the outputs to derive the key - a purely mathematical technique.

BCiphertext-only Attack

A ciphertext-only attack means the attacker only has access to encrypted data and attempts to deduce the plaintext or key without any other information.

CTiming Attack

A timing attack is a side-channel attack that exploits measurable differences in the time taken to perform cryptographic operations to infer secret key material.

DRubber Hose AttackCorrect

The term 'rubber hose attack' is a colloquial reference to physically compelling a person (via beatings, threats, or torture) to surrender passwords or encryption keys. It is classified as a side-channel attack because it exploits a physical weakness - the human - rather than any flaw in the cryptographic algorithm itself.

Concept tested: Rubber hose cryptanalysis physical coercion attack

Source: https://attack.mitre.org/techniques/T1591/

Topics

#rubber hose attack#cryptanalysis#coercion#physical attack

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice