CISSP · Question #1273
Which of the following is the MOST significant key management problem due to the number of keys created?
The correct answer is D. Exponential growth when using symmetric keys. Symmetric key cryptography requires a unique key for every pair of communicating parties, causing the number of keys to grow exponentially (n(n-1)/2) as users scale, making key management increasingly unmanageable.
Question
Options
- AKeys are more difficult to provision and
- BStorage of the keys require increased security
- CExponential growth when using asymmetric keys
- DExponential growth when using symmetric keys
How the community answered
(32 responses)- A6% (2)
- B3% (1)
- C9% (3)
- D81% (26)
Why each option
Symmetric key cryptography requires a unique key for every pair of communicating parties, causing the number of keys to grow exponentially (n(n-1)/2) as users scale, making key management increasingly unmanageable.
While provisioning difficulty is a real concern, it is a consequence of the exponential key growth problem rather than the root cause or most significant issue itself.
Increased storage security requirements are a secondary operational concern that stems from having many keys, but it does not represent the foundational key management problem that symmetric encryption creates.
Asymmetric (public key) cryptography actually scales much more efficiently-each user only needs a key pair (public and private), so n users require only 2n keys, making exponential growth a characteristic of symmetric, not asymmetric, systems.
In symmetric key cryptography, every pair of communicating parties requires a separate shared secret key, resulting in n(n-1)/2 keys for n users. This quadratic/exponential growth-for example, 10 users need 45 keys, 100 users need 4,950 keys-is the most significant key management problem because provisioning, distributing, storing, and revoking this massive number of keys becomes operationally infeasible at scale.
Concept tested: Symmetric key management scalability and key proliferation
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/encryption-overview
Topics
Community Discussion
No community discussion yet for this question.