nerdexam
EC-Council

312-50V9 · Question #273

Cryptography is the practice and study of techniques for secure communication in the presence of third parties (called adversaries.) More generally, it is about constructing and analyzing protocols…

The correct answer is C. Secure Sockets Layer (SSL) use the asymmetric encryption both (public/private key pair) to. SSL/TLS uses asymmetric encryption with a public/private key pair during the handshake to authenticate the server and securely establish session keys for encrypted communication.

Cryptography

Question

Cryptography is the practice and study of techniques for secure communication in the presence of third parties (called adversaries.) More generally, it is about constructing and analyzing protocols that overcome the influence of adversaries and that are related to various aspects in information security such as data confidentiality, data integrity, authentication, and non- repudiation. Modern cryptography intersects the disciplines of mathematics, computer science, and electrical engineering. Applications of cryptography include ATM cards, computer passwords, and electronic commerce. Basic example to understand how cryptography works is given below:

SECURE (plain text) +1(+1 next letter, for example, the letter ““T”” is used for ““S”” to encrypt.) TFDVSF (encrypted text) +=logic=> Algorithm 1=Factor=> Key Which of the following choices is true about cryptography?

Options

  • AAlgorithm is not the secret, key is the secret.
  • BSymmetric-key algorithms are a class of algorithms for cryptography that use the different
  • CSecure Sockets Layer (SSL) use the asymmetric encryption both (public/private key pair) to
  • DPublic-key cryptography, also known as asymmetric cryptography, public key is for decrypt,

How the community answered

(36 responses)
  • A
    6% (2)
  • B
    6% (2)
  • C
    75% (27)
  • D
    14% (5)

Why each option

SSL/TLS uses asymmetric encryption with a public/private key pair during the handshake to authenticate the server and securely establish session keys for encrypted communication.

AAlgorithm is not the secret, key is the secret.

While Kerckhoffs's principle correctly states that the key - not the algorithm - should be secret, this choice is stated incompletely and does not accurately describe any specific cryptographic protocol, making it a weaker and less precise answer than C.

BSymmetric-key algorithms are a class of algorithms for cryptography that use the different

Symmetric-key algorithms use the same single shared key for both encryption and decryption - using two different keys (public and private) is the defining property of asymmetric cryptography, not symmetric.

CSecure Sockets Layer (SSL) use the asymmetric encryption both (public/private key pair) toCorrect

SSL/TLS uses asymmetric (public/private key) encryption during the handshake phase to authenticate the server via a digital certificate and to securely exchange or derive symmetric session keys. This reliance on a public/private key pair is a defining characteristic of SSL and underpins the trust model of HTTPS. After the handshake completes, a symmetric session key is used for bulk data encryption due to its lower computational overhead.

DPublic-key cryptography, also known as asymmetric cryptography, public key is for decrypt,

In public-key (asymmetric) cryptography the public key is used to encrypt data and the private key is used to decrypt it; this choice reverses those roles, which is technically incorrect.

Concept tested: SSL asymmetric encryption and public/private key pair usage

Source: https://learn.microsoft.com/en-us/windows-server/security/tls/tls-ssl-schannel-ssp-overview

Topics

#SSL/TLS#asymmetric encryption#public key infrastructure#cryptographic protocols

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice