nerdexam
EC-Council

312-50V11 · Question #794

In the field of cryptanalysis, what is meant by a "rubber-hose" attack?

The correct answer is C. Extraction of cryptographic secrets through coercion or torture. A rubber-hose attack extracts cryptographic secrets through physical coercion or torture rather than any mathematical analysis of the algorithm.

Cryptography

Question

In the field of cryptanalysis, what is meant by a "rubber-hose" attack?

Options

  • AForcing the targeted keystream through a hardware-accelerated device such as an ASIC.
  • BA backdoor placed into a cryptographic algorithm by its creator.
  • CExtraction of cryptographic secrets through coercion or torture.
  • DAttempting to decrypt ciphertext by making logical assumptions about the contents of the original

How the community answered

(21 responses)
  • C
    95% (20)
  • D
    5% (1)

Why each option

A rubber-hose attack extracts cryptographic secrets through physical coercion or torture rather than any mathematical analysis of the algorithm.

AForcing the targeted keystream through a hardware-accelerated device such as an ASIC.

Forcing a keystream through an ASIC describes hardware-accelerated brute-force or stream cipher processing, which is a computational attack method unrelated to coercion.

BA backdoor placed into a cryptographic algorithm by its creator.

A backdoor inserted by an algorithm's creator is called a trapdoor or kleptographic backdoor, which is a distinct design-level vulnerability unrelated to rubber-hose attacks.

CExtraction of cryptographic secrets through coercion or torture.Correct

Rubber-hose cryptanalysis refers to threatening or physically coercing a person - such as beating them with a rubber hose - to force disclosure of cryptographic keys or passphrases. It bypasses the mathematical strength of any encryption algorithm entirely by targeting the human who holds the secret rather than the ciphertext itself.

DAttempting to decrypt ciphertext by making logical assumptions about the contents of the original

Making logical assumptions about plaintext content to break ciphertext describes a known-plaintext or crib-dragging attack, not a coercion-based technique.

Concept tested: Rubber-hose cryptanalysis coercion-based secret extraction

Topics

#rubber-hose attack#cryptanalysis#coercion#cryptographic secrets

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice