312-50V11 · Question #794
In the field of cryptanalysis, what is meant by a "rubber-hose" attack?
The correct answer is C. Extraction of cryptographic secrets through coercion or torture. A rubber-hose attack extracts cryptographic secrets through physical coercion or torture rather than any mathematical analysis of the algorithm.
Question
In the field of cryptanalysis, what is meant by a "rubber-hose" attack?
Options
- AForcing the targeted keystream through a hardware-accelerated device such as an ASIC.
- BA backdoor placed into a cryptographic algorithm by its creator.
- CExtraction of cryptographic secrets through coercion or torture.
- DAttempting to decrypt ciphertext by making logical assumptions about the contents of the original
How the community answered
(21 responses)- C95% (20)
- D5% (1)
Why each option
A rubber-hose attack extracts cryptographic secrets through physical coercion or torture rather than any mathematical analysis of the algorithm.
Forcing a keystream through an ASIC describes hardware-accelerated brute-force or stream cipher processing, which is a computational attack method unrelated to coercion.
A backdoor inserted by an algorithm's creator is called a trapdoor or kleptographic backdoor, which is a distinct design-level vulnerability unrelated to rubber-hose attacks.
Rubber-hose cryptanalysis refers to threatening or physically coercing a person - such as beating them with a rubber hose - to force disclosure of cryptographic keys or passphrases. It bypasses the mathematical strength of any encryption algorithm entirely by targeting the human who holds the secret rather than the ciphertext itself.
Making logical assumptions about plaintext content to break ciphertext describes a known-plaintext or crib-dragging attack, not a coercion-based technique.
Concept tested: Rubber-hose cryptanalysis coercion-based secret extraction
Topics
Community Discussion
No community discussion yet for this question.