nerdexam
CompTIA

CAS-002 · Question #810

A security administrator has been asked to select a cryptographic algorithm to meet the criteria of a new application. The application utilizes streaming video that can be viewed both on computers…

The correct answer is E. Use RC4 with a nonce generated IV F. Use AES in Counter mode. This question tests selection of encryption algorithms and operational modes that minimize performance overhead for streaming video transport across heterogeneous devices.

Enterprise Security

Question

A security administrator has been asked to select a cryptographic algorithm to meet the criteria of a new application. The application utilizes streaming video that can be viewed both on computers and mobile devices. The application designers have asked that the algorithm support the transport encryption with the lowest possible performance overhead. Which of the following recommendations would BEST meet the needs of the application designers? (Select TWO).

Options

  • AUse AES in Electronic Codebook mode
  • BUse RC4 in Cipher Block Chaining mode
  • CUse RC4 with Fixed IV generation
  • DUse AES with cipher text padding
  • EUse RC4 with a nonce generated IV
  • FUse AES in Counter mode

How the community answered

(21 responses)
  • A
    10% (2)
  • B
    5% (1)
  • D
    10% (2)
  • E
    76% (16)

Why each option

This question tests selection of encryption algorithms and operational modes that minimize performance overhead for streaming video transport across heterogeneous devices.

AUse AES in Electronic Codebook mode

AES in Electronic Codebook mode encrypts each block independently, causing identical plaintext blocks to produce identical ciphertext and leaking patterns in the stream, making it both insecure and unsuitable for streaming media.

BUse RC4 in Cipher Block Chaining mode

RC4 is a stream cipher and is architecturally incompatible with Cipher Block Chaining mode, which is an operation mode defined only for block ciphers - the combination is not a valid cryptographic construction.

CUse RC4 with Fixed IV generation

A fixed IV with RC4 means the same keystream is generated every session, allowing an attacker who captures two ciphertexts to XOR them and recover plaintext, rendering the encryption broken.

DUse AES with cipher text padding

AES with ciphertext padding is characteristic of block cipher modes such as CBC and introduces computational and size overhead that is unnecessary and counterproductive for low-latency streaming transport.

EUse RC4 with a nonce generated IVCorrect

RC4 is a native stream cipher designed for continuous data streams, and pairing it with a nonce-generated IV prevents keystream reuse, which is RC4's primary practical vulnerability. This combination provides low computational overhead suitable for real-time video delivery on resource-constrained mobile hardware.

FUse AES in Counter modeCorrect

AES in Counter (CTR) mode uses an incrementing counter encrypted by AES to generate a keystream, effectively converting the block cipher into a stream cipher without padding or chaining dependencies. CTR mode is fully parallelizable and avoids the latency penalties of block-oriented modes, making it efficient for continuous streaming workloads on both desktop and mobile platforms.

Concept tested: Stream cipher and block cipher mode selection for video transport encryption

Source: https://csrc.nist.gov/publications/detail/sp/800-38a/final

Topics

#cryptography#RC4#AES counter mode#stream cipher performance

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice