312-50V10 · Question #794
In the field of cryptanalysis, what is meant by a "rubber-hose" attack?
The correct answer is C. Extraction of cryptographic secrets through coercion or torture. A rubber-hose attack bypasses mathematical cryptanalysis entirely by extracting keys or plaintext through physical coercion, threats, or torture of the person holding the secret. It is considered a social/physical attack rather than a technical one.
Question
In the field of cryptanalysis, what is meant by a "rubber-hose" attack?
Options
- AForcing the targeted keystream through a hardware-accelerated device such as an ASIC.
- BA backdoor placed into a cryptographic algorithm by its creator.
- CExtraction of cryptographic secrets through coercion or torture.
- DAttempting to decrypt ciphertext by making logical assumptions about the contents of the original
How the community answered
(21 responses)- A10% (2)
- C86% (18)
- D5% (1)
Why each option
A rubber-hose attack bypasses mathematical cryptanalysis entirely by extracting keys or plaintext through physical coercion, threats, or torture of the person holding the secret. It is considered a social/physical attack rather than a technical one.
Using hardware-accelerated devices (ASICs) to speed up brute-force attacks describes a hardware cryptanalysis technique, not a rubber-hose attack.
A backdoor inserted by an algorithm's creator is known as a 'kleptographic' or trapdoor attack, not a rubber-hose attack.
The term 'rubber-hose attack' is a darkly humorous reference to physically beating someone with a rubber hose to force them to reveal cryptographic keys or passwords. It highlights that even mathematically unbreakable encryption is vulnerable if an attacker can coerce the human holding the secret, making it a non-mathematical threat vector in cryptanalysis.
Making logical assumptions about plaintext contents to break ciphertext describes a known-plaintext or crib-dragging attack, not a rubber-hose attack.
Concept tested: Rubber-hose attack - coercion-based cryptanalysis
Source: https://www.ietf.org/rfc/rfc2828.txt
Topics
Community Discussion
No community discussion yet for this question.