nerdexam
(ISC)2

SSCP · Question #588

A X.509 public key certificate with the key usage attribute "non repudiation" can be used for which of the following?

The correct answer is B. signing messages. A public key certificate with the 'non repudiation' key usage attribute indicates that the corresponding private key can be used to create digital signatures that provide irrefutable proof of origin.

Submitted by layla.eg· Apr 18, 2026Cryptography

Question

A X.509 public key certificate with the key usage attribute "non repudiation" can be used for which of the following?

Options

  • Aencrypting messages
  • Bsigning messages
  • Cverifying signed messages
  • Ddecrypt encrypted messages

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    90% (18)
  • C
    5% (1)

Why each option

A public key certificate with the 'non repudiation' key usage attribute indicates that the corresponding private key can be used to create digital signatures that provide irrefutable proof of origin.

Aencrypting messages

Encrypting messages typically uses the 'key encipherment' or 'data encipherment' key usage attribute, not 'non-repudiation,' which is for signing.

Bsigning messagesCorrect

The 'non-repudiation' key usage attribute in an X.509 certificate signifies that the private key corresponding to the public key in the certificate is intended for creating digital signatures. These signatures provide strong proof of origin and integrity, preventing the signatory from denying that they sent or approved a particular message or transaction.

Cverifying signed messages

Verifying signed messages uses the signer's public key, which is contained within the certificate, but the 'non-repudiation' attribute specifically applies to the private key's capability to sign, not the public key's capability to verify.

Ddecrypt encrypted messages

Decrypting encrypted messages uses the 'data encipherment' or 'key agreement' attributes for the private key, not 'non-repudiation.'

Concept tested: X.509 key usage non-repudiation

Source: https://learn.microsoft.com/en-us/windows/win32/seccrypto/key-usages

Topics

#X.509 Certificates#Key Usage#Non-Repudiation#Digital Signatures

Community Discussion

No community discussion yet for this question.

Full SSCP Practice