nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #199

Which requirement is not necessary for a cryptographic hash function?

The correct answer is C. The function must work on a variety of input sizes. The formal cryptographic requirements for a hash function are: (1) one-way/pre-image resistance - it must be computationally infeasible to reverse; (2) collision resistance - it must have a low probability of producing the same output for different inputs; and (3) efficiency…

Cryptography

Question

Which requirement is not necessary for a cryptographic hash function?

Options

  • AThe function must have a low probability of producing the same output for different inputs
  • BThe function must be efficient to compute
  • CThe function must work on a variety of input sizes
  • DThe function must be one way

How the community answered

(48 responses)
  • A
    8% (4)
  • B
    2% (1)
  • C
    85% (41)
  • D
    4% (2)

Explanation

The formal cryptographic requirements for a hash function are: (1) one-way/pre-image resistance - it must be computationally infeasible to reverse; (2) collision resistance - it must have a low probability of producing the same output for different inputs; and (3) efficiency - it must be fast to compute. While hash functions do in practice accept variable-length inputs and produce fixed-length outputs, 'must work on a variety of input sizes' is not listed as a formal cryptographic security requirement. The other three options describe core, formally-defined properties that every secure hash function must satisfy.

Topics

#Cryptographic Hashes#Cryptography Principles#Hash Function Properties

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice