nerdexam
EC-Council

312-50V11 · Question #76

Which of the following cryptography attack is an understatement for the extraction of cryptographic secrets (e.g. the password to an encrypted file) from a person by a coercion or torture?

The correct answer is D. Rubber Hose Attack. The Rubber Hose Attack refers to obtaining cryptographic secrets through physical coercion or torture of the secret holder rather than attacking the algorithm itself.

Cryptography

Question

Which of the following cryptography attack is an understatement for the extraction of cryptographic secrets (e.g. the password to an encrypted file) from a person by a coercion or torture?

Options

  • AChosen-Cipher text Attack
  • BCiphertext-only Attack
  • CTiming Attack
  • DRubber Hose Attack

How the community answered

(55 responses)
  • A
    2% (1)
  • C
    4% (2)
  • D
    95% (52)

Why each option

The Rubber Hose Attack refers to obtaining cryptographic secrets through physical coercion or torture of the secret holder rather than attacking the algorithm itself.

AChosen-Cipher text Attack

A Chosen-Ciphertext Attack is a cryptanalysis method where an attacker submits chosen ciphertexts to a decryption oracle to recover the key - it exploits algorithmic weaknesses, not human coercion.

BCiphertext-only Attack

A Ciphertext-only Attack involves statistically analyzing intercepted ciphertext without any plaintext reference - no physical coercion or human interaction is involved.

CTiming Attack

A Timing Attack is a side-channel attack that measures execution time differences in cryptographic operations to infer secret values - it is a passive analytical technique, not physical coercion.

DRubber Hose AttackCorrect

The Rubber Hose Attack is a euphemism describing the extraction of cryptographic secrets by physically threatening, coercing, or torturing the person who possesses them. Unlike mathematical cryptanalysis, this technique bypasses encryption entirely by targeting the human element, forcing the key or password holder to reveal secrets directly under duress.

Concept tested: Non-technical cryptanalysis via human coercion

Topics

#rubber hose attack#coercion#cryptanalysis#side-channel attack

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice