SSCP · Question #588
A X.509 public key certificate with the key usage attribute "non repudiation" can be used for which of the following?
The correct answer is B. signing messages. A public key certificate with the 'non repudiation' key usage attribute indicates that the corresponding private key can be used to create digital signatures that provide irrefutable proof of origin.
Question
A X.509 public key certificate with the key usage attribute "non repudiation" can be used for which of the following?
Options
- Aencrypting messages
- Bsigning messages
- Cverifying signed messages
- Ddecrypt encrypted messages
How the community answered
(20 responses)- A5% (1)
- B90% (18)
- C5% (1)
Why each option
A public key certificate with the 'non repudiation' key usage attribute indicates that the corresponding private key can be used to create digital signatures that provide irrefutable proof of origin.
Encrypting messages typically uses the 'key encipherment' or 'data encipherment' key usage attribute, not 'non-repudiation,' which is for signing.
The 'non-repudiation' key usage attribute in an X.509 certificate signifies that the private key corresponding to the public key in the certificate is intended for creating digital signatures. These signatures provide strong proof of origin and integrity, preventing the signatory from denying that they sent or approved a particular message or transaction.
Verifying signed messages uses the signer's public key, which is contained within the certificate, but the 'non-repudiation' attribute specifically applies to the private key's capability to sign, not the public key's capability to verify.
Decrypting encrypted messages uses the 'data encipherment' or 'key agreement' attributes for the private key, not 'non-repudiation.'
Concept tested: X.509 key usage non-repudiation
Source: https://learn.microsoft.com/en-us/windows/win32/seccrypto/key-usages
Topics
Community Discussion
No community discussion yet for this question.