nerdexam
EC-Council

312-50V9 · Question #308

What is correct about digital signatures?

The correct answer is A. A digital signature cannot be moved from one signed document to another because it is the hash. A digital signature encodes the hash of its specific document, cryptographically binding it to that document and making it impossible to reuse on any other.

Cryptography

Question

What is correct about digital signatures?

Options

  • AA digital signature cannot be moved from one signed document to another because it is the hash
  • BDigital signatures may be used in different documents of the same type.
  • CA digital signature cannot be moved from one signed document to another because it is a plain
  • DDigital signatures are issued once for each user and can be used everywhere until they expire.

How the community answered

(39 responses)
  • A
    72% (28)
  • B
    15% (6)
  • C
    8% (3)
  • D
    5% (2)

Why each option

A digital signature encodes the hash of its specific document, cryptographically binding it to that document and making it impossible to reuse on any other.

AA digital signature cannot be moved from one signed document to another because it is the hashCorrect

When a document is signed, a hash of its exact contents is computed and then encrypted with the signer's private key to produce the digital signature. Because the signature literally contains that specific hash value, attaching it to a different document causes verification to fail - the recomputed hash of the new document will not match the hash embedded in the signature.

BDigital signatures may be used in different documents of the same type.

A digital signature cannot be reused across different documents even of the same type, because each document's unique content produces a different hash value that the signature is bound to.

CA digital signature cannot be moved from one signed document to another because it is a plain

While the claim that a signature cannot be moved between documents is correct, the stated reason - that it is plain text - is factually wrong; the real reason is that it encodes the document-specific hash.

DDigital signatures are issued once for each user and can be used everywhere until they expire.

Digital signatures are not reusable user credentials issued once; a new signature must be computed for every individual document by applying the signer's private key to that document's unique hash.

Concept tested: Digital signature hash binding and non-transferability

Source: https://learn.microsoft.com/en-us/windows/win32/seccrypto/digital-signatures

Topics

#digital signatures#hash function#document integrity#PKI

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice