312-50V11 · Question #76
Which of the following cryptography attack is an understatement for the extraction of cryptographic secrets (e.g. the password to an encrypted file) from a person by a coercion or torture?
The correct answer is D. Rubber Hose Attack. The Rubber Hose Attack refers to obtaining cryptographic secrets through physical coercion or torture of the secret holder rather than attacking the algorithm itself.
Question
Which of the following cryptography attack is an understatement for the extraction of cryptographic secrets (e.g. the password to an encrypted file) from a person by a coercion or torture?
Options
- AChosen-Cipher text Attack
- BCiphertext-only Attack
- CTiming Attack
- DRubber Hose Attack
How the community answered
(55 responses)- A2% (1)
- C4% (2)
- D95% (52)
Why each option
The Rubber Hose Attack refers to obtaining cryptographic secrets through physical coercion or torture of the secret holder rather than attacking the algorithm itself.
A Chosen-Ciphertext Attack is a cryptanalysis method where an attacker submits chosen ciphertexts to a decryption oracle to recover the key - it exploits algorithmic weaknesses, not human coercion.
A Ciphertext-only Attack involves statistically analyzing intercepted ciphertext without any plaintext reference - no physical coercion or human interaction is involved.
A Timing Attack is a side-channel attack that measures execution time differences in cryptographic operations to infer secret values - it is a passive analytical technique, not physical coercion.
The Rubber Hose Attack is a euphemism describing the extraction of cryptographic secrets by physically threatening, coercing, or torturing the person who possesses them. Unlike mathematical cryptanalysis, this technique bypasses encryption entirely by targeting the human element, forcing the key or password holder to reveal secrets directly under duress.
Concept tested: Non-technical cryptanalysis via human coercion
Topics
Community Discussion
No community discussion yet for this question.