nerdexam
EC-Council

312-50V10 · Question #794

In the field of cryptanalysis, what is meant by a "rubber-hose" attack?

The correct answer is C. Extraction of cryptographic secrets through coercion or torture. A rubber-hose attack bypasses mathematical cryptanalysis entirely by extracting keys or plaintext through physical coercion, threats, or torture of the person holding the secret. It is considered a social/physical attack rather than a technical one.

Cryptography

Question

In the field of cryptanalysis, what is meant by a "rubber-hose" attack?

Options

  • AForcing the targeted keystream through a hardware-accelerated device such as an ASIC.
  • BA backdoor placed into a cryptographic algorithm by its creator.
  • CExtraction of cryptographic secrets through coercion or torture.
  • DAttempting to decrypt ciphertext by making logical assumptions about the contents of the original

How the community answered

(21 responses)
  • A
    10% (2)
  • C
    86% (18)
  • D
    5% (1)

Why each option

A rubber-hose attack bypasses mathematical cryptanalysis entirely by extracting keys or plaintext through physical coercion, threats, or torture of the person holding the secret. It is considered a social/physical attack rather than a technical one.

AForcing the targeted keystream through a hardware-accelerated device such as an ASIC.

Using hardware-accelerated devices (ASICs) to speed up brute-force attacks describes a hardware cryptanalysis technique, not a rubber-hose attack.

BA backdoor placed into a cryptographic algorithm by its creator.

A backdoor inserted by an algorithm's creator is known as a 'kleptographic' or trapdoor attack, not a rubber-hose attack.

CExtraction of cryptographic secrets through coercion or torture.Correct

The term 'rubber-hose attack' is a darkly humorous reference to physically beating someone with a rubber hose to force them to reveal cryptographic keys or passwords. It highlights that even mathematically unbreakable encryption is vulnerable if an attacker can coerce the human holding the secret, making it a non-mathematical threat vector in cryptanalysis.

DAttempting to decrypt ciphertext by making logical assumptions about the contents of the original

Making logical assumptions about plaintext contents to break ciphertext describes a known-plaintext or crib-dragging attack, not a rubber-hose attack.

Concept tested: Rubber-hose attack - coercion-based cryptanalysis

Source: https://www.ietf.org/rfc/rfc2828.txt

Topics

#rubber-hose attack#cryptanalysis#coercion#side-channel attack

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice