nerdexam
GIAC

GSEC · Question #290

An application developer would like to replace Triple DES in their software with a stronger algorithm of the same type. Which of the following should they use?

The correct answer is B. AES. AES is the NIST-standardized symmetric block cipher selected to replace DES and 3DES, offering greater key strength and better performance.

Linux and Cryptography

Question

An application developer would like to replace Triple DES in their software with a stronger algorithm of the same type. Which of the following should they use?

Options

  • ARC5
  • BAES
  • CRSA
  • DSHA

How the community answered

(21 responses)
  • A
    10% (2)
  • B
    71% (15)
  • C
    5% (1)
  • D
    14% (3)

Why each option

AES is the NIST-standardized symmetric block cipher selected to replace DES and 3DES, offering greater key strength and better performance.

ARC5

RC5 is a symmetric block cipher but was never adopted as a NIST standard and is not recognized as a stronger or recommended successor to 3DES.

BAESCorrect

Triple DES is a symmetric block cipher, and AES (Advanced Encryption Standard) is also a symmetric block cipher that NIST standardized in 2001 as its direct replacement. AES supports 128-, 192-, and 256-bit key lengths, is computationally more efficient than 3DES's effective 112-bit security, and has no known practical attacks against correctly implemented full-round versions.

CRSA

RSA is an asymmetric (public-key) algorithm, which is a fundamentally different type of cryptography than 3DES, which is symmetric.

DSHA

SHA is a cryptographic hash function used for data integrity verification, not an encryption algorithm, so it is not the same type as 3DES.

Concept tested: Symmetric block cipher replacement - 3DES to AES

Source: https://csrc.nist.gov/projects/cryptographic-standards-and-guidelines/archived-crypto-projects/aes-development

Topics

#AES#Triple DES#symmetric encryption#algorithm selection

Community Discussion

No community discussion yet for this question.

Full GSEC Practice