nerdexam
EC-Council

312-50V11 · Question #378

For messages sent through an insecure channel, a properly implemented digital signature gives the receiver reason to believe the message was sent by the claimed sender. While using a digital signature

The correct answer is D. Sender's private key. In a digital signature, the sender encrypts the message digest with their private key to prove authenticity and enable non-repudiation.

Cryptography

Question

For messages sent through an insecure channel, a properly implemented digital signature gives the receiver reason to believe the message was sent by the claimed sender. While using a digital signature, the message digest is encrypted with which key?

Options

  • ASender's public key
  • BReceiver's private key
  • CReceiver's public key
  • DSender's private key

How the community answered

(35 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    3% (1)
  • D
    89% (31)

Why each option

In a digital signature, the sender encrypts the message digest with their private key to prove authenticity and enable non-repudiation.

ASender's public key

The sender's public key is used by recipients to verify (decrypt) the signature, not to create it - encrypting with the public key would allow anyone to forge the signature.

BReceiver's private key

The receiver's private key is used to decrypt confidential messages sent to them in asymmetric encryption, and plays no role in validating or creating a digital signature.

CReceiver's public key

The receiver's public key is used to encrypt data intended for the receiver's eyes only, which is a confidentiality operation entirely separate from digital signature authentication.

DSender's private keyCorrect

The sender uses their own private key to encrypt the message digest, creating the digital signature. The recipient then decrypts the digest using the sender's corresponding public key - if decryption succeeds and the digest matches, it proves the message was signed by the entity holding that private key and has not been tampered with in transit.

Concept tested: Digital signature creation using sender's private key

Source: https://csrc.nist.gov/publications/detail/fips/186/5/final

Topics

#digital signatures#message digest#sender private key#asymmetric cryptography

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice