312-50V12 · Question #12
John wants to send Marie an email that includes sensitive information, and he does not trust the network that he is connected to. Marie gives him the idea of using PGP. What should John do to…
The correct answer is D. Use Marie's public key to encrypt the message. In PGP encryption, the sender encrypts the message using the recipient's public key, ensuring only the recipient can decrypt it with their corresponding private key.
Question
Options
- AUse his own private key to encrypt the message.
- BUse his own public key to encrypt the message.
- CUse Marie's private key to encrypt the message.
- DUse Marie's public key to encrypt the message.
How the community answered
(25 responses)- A4% (1)
- C4% (1)
- D92% (23)
Why each option
In PGP encryption, the sender encrypts the message using the recipient's public key, ensuring only the recipient can decrypt it with their corresponding private key.
Using John's own private key would perform a digital signature operation (proving authenticity), not encryption for confidentiality - it would not protect the message content from eavesdroppers.
Using John's own public key to encrypt would mean only John could decrypt it with his private key, making it unreadable to Marie and defeating the purpose of sending her a secure message.
Marie's private key must remain secret and should never be shared with John or anyone else; sharing a private key completely compromises the security of the asymmetric encryption system.
In asymmetric/PGP encryption, John must use Marie's public key to encrypt the message. Only Marie's corresponding private key can decrypt it, ensuring that even if the message is intercepted on the untrusted network, no one else can read it. This is the fundamental principle of public-key cryptography used in PGP.
Concept tested: PGP asymmetric encryption using recipient's public key
Source: https://www.rfc-editor.org/rfc/rfc4880
Topics
Community Discussion
No community discussion yet for this question.