nerdexam
GIAC

GSEC · Question #126

To be considered a strong algorithm, an encryption algorithm must be which of the following?

The correct answer is B. Well-known. Kerckhoffs's principle states that a cryptographic algorithm should be secure even if everything about the system, except the key, is public knowledge.

Linux and Cryptography

Question

To be considered a strong algorithm, an encryption algorithm must be which of the following?

Options

  • ASecret
  • BWell-known
  • CConfidential
  • DProprietary

How the community answered

(48 responses)
  • A
    4% (2)
  • B
    73% (35)
  • C
    15% (7)
  • D
    8% (4)

Why each option

Kerckhoffs's principle states that a cryptographic algorithm should be secure even if everything about the system, except the key, is public knowledge.

ASecret

Keeping an algorithm secret is 'security through obscurity,' which is not considered a strong security property since discovery of the algorithm immediately breaks the system.

BWell-knownCorrect

Kerckhoffs's principle, a foundational tenet of modern cryptography, requires that an algorithm's security must rest entirely on the secrecy of the key, not on the algorithm itself being hidden. Well-known algorithms like AES and RSA are publicly scrutinized by the global cryptographic community, which strengthens confidence in their security by exposing any weaknesses. Proprietary or secret algorithms cannot be vetted, making undiscovered flaws far more likely.

CConfidential

Confidential is equivalent to secret in this context - relying on algorithm secrecy for security violates Kerckhoffs's principle.

DProprietary

Proprietary algorithms are not publicly audited, meaning vulnerabilities may exist that have never been discovered or disclosed, undermining trust.

Concept tested: Kerckhoffs's principle in cryptographic algorithm strength

Source: https://csrc.nist.gov/glossary/term/kerckhoffs_principle

Topics

#Kerckhoffs principle#cryptographic strength#open algorithm#security by obscurity

Community Discussion

No community discussion yet for this question.

Full GSEC Practice