350-701 · Question #286
When choosing an algorithm to us what should be considered about Diffie Hellman and RSA for key establishment?
The correct answer is C. DH is on asymmetric key establishment algorithm intended to output symmetric keys.. Diffie-Hellman (DH) is an asymmetric key establishment algorithm specifically designed to securely generate a shared symmetric key between two parties over an insecure channel.
Question
When choosing an algorithm to us what should be considered about Diffie Hellman and RSA for key establishment?
Exhibit
Options
- ARSA is an asymmetric key establishment algorithm Intended to output symmetric keys.
- BDH is a symmetric key establishment algorithm Intended to output asymmetric keys
- CDH is on asymmetric key establishment algorithm intended to output symmetric keys.
- DRSA is a symmetric key establishment algorithm intended to output asymmetric keys.
How the community answered
(30 responses)- A3% (1)
- C87% (26)
- D10% (3)
Why each option
Diffie-Hellman (DH) is an asymmetric key establishment algorithm specifically designed to securely generate a shared symmetric key between two parties over an insecure channel.
RSA is an asymmetric algorithm, but its primary use for key establishment is often for key transport (encrypting a symmetric key with a public key), not directly 'outputting' symmetric keys through a shared calculation like DH.
Diffie-Hellman is an asymmetric algorithm, not a symmetric one.
Diffie-Hellman (DH) is an asymmetric key exchange algorithm because it uses public parameters and mathematically derived private values for each participant to compute a shared secret, which is a symmetric key for subsequent communication.
RSA is an asymmetric algorithm, not a symmetric one, and while it involves key pairs, describing it as 'intended to output asymmetric keys' is incorrect in the context of key establishment for shared secrets.
Concept tested: Diffie-Hellman vs. RSA key exchange characteristics
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/d1/sec-d1-cr-book/sec-d1-cr-ipsec-ike.html#concept_7F68897FB4B749DE9D63CF1411D44605
Topics
Community Discussion
No community discussion yet for this question.