Cissp Cryptography

Front 1

encryption; encrypt with receivers public key

Back 1

confidentiality

Front 2

integrity *sometimes CBC-MAC*

Back 2

hash

Front 3

from senders private key

Back 3

proof of origin

Front 4

integrity + proof of origin; digital signature

Back 4

non-repudiation

Front 5

super secret should be protected the "secret"

Back 5

key

Front 6

well-known, Kerchoffs laws says security is based of realease of this

Back 6

algorithm

Front 7

two keys providing the same result; reduces key space

Back 7

key clustering

Front 8

problems - discernable, redundancies, statistical patterns
solutions - confusion, diffusion, avalanche

Back 8

secure crypto algorithms

Front 9

moving or changing order

Back 9

diffusion

Front 10

hiding patterns

Back 10

confusion

Front 11

a bit change to input changes everything forward

Back 11

avalanche

Front 12

a method of encryption by which units of plaintext are replaced with ciphertext according to a regular system; the "units" may be single letters (the most common), pairs of letters, triplets of letters, mixtures of the above, and so forth

Back 12

substitution cipher

Front 13

expanding plaintext by duplicating values found in plaintext

Back 13

expansion

Front 14

adding additional material to the plaintext message before its encrypted to assist with encryption weaknesses

Back 14

padding

Front 15

using a portion of the full size of key to limit exposure of the key

Back 15

key mixing

Front 16

randomly generated value used by many cryptsystems to ensure a unique cipher text

Back 16

initialization vector

Front 17

second set of keys that open the same lock

Back 17

key clustering

Front 18

an estimate of the effort/time needed to overcome a protective measure

Back 18

work factor

Front 19

a basic transformation technique and another name for binary addition; usually implemented in hardware; stream algorithms use; RC4

Back 19

XOR

Front 20

stream cipher in an algorithm, generated bit by bit

Back 20

synchronous cipher

Front 21

key stream is generated based on previous plaintext and key

Back 21

asynchronous cipher

Front 22

Problems -key distribution problem; only addresses cofidentiality; stream = RC4;

Back 22

symmetric -shared key - session key - secret key

Front 23

private key only unlocks; public locks; scalable key distrubution; Diffie & Hellman 1976, Public Key cryptopgraphy

Back 23

asymmetric - key pair - public/private key

Front 24

statistically unpredectable and unbiased; operates on individual bits;RC4

Back 24

keystream

Front 25

fixed-sized blocks - plaintext
Rindael; grabs a chunk/block of data and encrypts; data transport & data storage

Back 25

block cipher

Front 26

algorithm that, given the key, calculates the subkeys for these rounds

Back 26

key schedule

Front 27

the action of replacing one leter or value for another CEASER CIPHER

Back 27

substitution

Front 28

changing the order of the input data so that letters appear in different order in the output cipher ; skytale rod

Back 28

transpositon

Front 29

a simple substitution cipher that uses multiple alphabets rather than one; VIGENERE CIPHER used a keyword

Back 29

polyalphabetic cipher

Front 30

done by using the numerical value of leters in the plaintext and coded and decoded by using a copy of the text in a book as a key

Back 30

running ciphers

Front 31

known as VERNAM CIPHERS; keys are the same length as the plaintext message, randomly generated and used only once

Back 31

one-time pad

Front 32

art of hiding information; plaintext hidden/disguised; prevents a third party from knowing that a secret message exist; traditionally accomplished by physical techniques & null ciphers

Back 32

steganography

Front 33

rgb* values altered to contain a message; file sizes are identical; different hash values

Back 33

modern steganography

Front 34

encoding messages; secrecy and integrity; examples - colored flags & morse code

Back 34

steganography codes

Front 35

the process of possibly irreversibly embedding information into a digital signal. The signal may be audio, pictures or video, for example. If the signal is copied, then the information is also carried in the copy

Back 35

Digital watermarking

Front 36

a generic term that refers to access control technologies that can be used by hardware manufacturers, publishers, copyright holders and individuals to try to impose limitations on the usage of digital content and devices

Back 36

rights management

Front 37

DES,AES

Back 37

symmetric algorithms

Front 38

DES Modes----->ECB, CBC

Back 38

symmetric algorithm block modes

Front 39

CFB (OK), OFB (BAD error cascade), CTR (GOOD)

Back 39

symmetric algorithm stream modes

Front 40

uses 64bit (56 bit useful 8 bit parity); block cipher 16 rounds; disadvantage keyspace to small

Back 40

DES

Front 41

first plaintext block is XOR'edd with an initialization vector resulting ciphertext result is chained into the next plaintext value

Back 41

Cipher Block Chaining (CBC)

Front 42

too short/bad each block of plaintext is encrypted independently using the same key

Back 42

Electronic Code Book (ECB)

Front 43

similiar to CBC; IV is encrypted and then XOR'ed with the first plaintext block

Back 43

Cipher Feed Back (CFB)

Front 44

can be implemented in DDES; Triple DES [EEE3-EDE3-EEE2]

Back 44

DES

Front 45

prone to meet in the middle attack

Back 45

Double DES

Front 46

twice as effective as predecessor

Back 46

3DES

Front 47

most secure of 3DES

Back 47

3TDES-EDE

Front 48

developed by Daemon and Rijmen in 1998; block sizes: 128, 192, and 256; variable number of rounds; variable key size

Back 48

Rijndael Algorithm

Front 49

standard uses 128 bit standard

Back 49

AES Advance Encryption Standard

Front 50

RC5 & RC6, Blowfish, Twofish, CAST, SAFER, Serpent

Back 50

other block ciphers

Front 51

symmetric cipher, using PGP internationally used, patent issues

Back 51

IDEA

Front 52

symmetric stream cipher with variable key size, fast

Back 52

RC4

Front 53

2 symmetric ciphers which are fast & havebig keys

Back 53

Blowflish and Two Fish

Front 54

factoring = ; large prime number; 1024kbit & 2040bit; digital signatures;

Back 54

RSA

Front 55

allows key negotiation; key exchange; weakness never know other end negotiation

Back 55

Diffie - Hellman

Front 56

-originator [public key of receiver] receiver [private key of receiver]

Back 56

COFIDENTIALITY

Front 57

originator [private key of originator] receiver [public key of originator]

Back 57

PROOF OF ORIGIN

Front 58

originator's perspective - originators private key receiver's public key yo receive

Back 58

COFIDENTIALITY AND PROOF OF ORIGIN

Front 59

asymmetric algorithm; weakness of maluability

Back 59

El Gamal

Front 60

asymmetric algorithm; small & strong; good for wireless devices;

Back 60

Elliptic Curve Cryptography (ECC)

Front 61

Merkle-Hellman Knapsack, Chor-Rivest Knapsack

Back 61

other asymmetric algorithms

Front 62

detection of alterations; value added to message; one-way function

Back 62

Message Integrity Controls (MIC)

Front 63

Checksum CRC Layer 2; Parity XOR RAID, & Hash

Back 63

Accidental Change Detection Measures

Front 64

HMAC, Digital Signature, CBC-MAC; key hashes

Back 64

Intentional Change Detection Measures

Front 65

Message Digest - MD2,MD4,MD5
Secure Hash Algorithm (SHA) - HAVAL, RIPEMD, Tiger, WHIRLPHOOL

Back 65

Common Hash Functions

Front 66

Condensed representatio of the message; one-way function; non-linear relationship; hash calculated from whole original message; variable to fixed length

Back 66

Hash Function Characteristics

Front 67

none used to encrypt; HMAC;CBC-MAC;CMAC

Back 67

Message Authenticatio Code (MAC) and Keyed Hashes

Front 68

Asymmentric cryptography + Hash; only authenticity; sender's private key encrypts the hash; sender's public key used to verify signature; legality; DSA,RSA, ElGamal, Schnoor, ECC

Back 68

Digital Signatures

Front 69

Operations - Dual Control, Split Knowledge
Creation - Automated key generation, truly random, suitable length, key encrypting key
Change - expiry
Distribution, Storage, Recovery

Back 69

Functions of Key Management

Front 70

Binds a person/entitto their public key which are published and certified by digital signatures; cross certification; certificate revocation list; X.509 standard

Back 70

Public Key Infrastructure

Front 71

trustworthiness, certification establishes trustworthiness

Back 71

Trust Model

Front 72

use evaluated solution; high work factor; publicly evaluated cryptographic algorithms; training; law enforcement issues

Back 72

strong cryptographic issues

Front 73

art of breaking codes; attack vectors - key,algorithm,implementation, data (ciphertext or plaintext), people
Assumptions

Back 73

cryptanalysis

Front 74

trying all possible key algorithms;

Back 74

brute force

Front 75

known/chosen plaintext
ciphertext only

Back 75

ciphertext attacks

Front 76

dictionary attack, birthday attack, rainbow table attack

Back 76

hash value attacks

Front 77

stream - frequency analysis, IV or keystream analysis

block - linear cryptanalysis, diferential cryptanalysis, linear-differential analysis

Back 77

cipher attacks

Front 78

persuasion, coercion, bribery

Back 78

Social Engineering

Front 79

an algorithm used to generate crytographic keys from user input

Back 79

Key Derivation Function KDF

Front 80

Privacy Enhanced Mail (PEM), Pretty Good Privacy (PGP), Secure Multipurpose Internet Mail Extensions

Back 80

Secure Email Protocols

Front 81

Dictionary Attack, Birthday, & Rainbow Table Attacks

Back 81

Hash Attack Types

Front 82

mathematical function that determines the cryptographic operations

Back 82

Algorithm

Front 83

encryption system using a pair of mathematically related unequal keys

Back 83

Asymmetric

Front 84

statistical probabilities of a collision are more likely than one thinks

Back 84

Birthday attack

Front 85

with enough computing power trying all possible combinations

Back 85

Brute Force

Front 86

a temporary public file to inform others of a compromised digital certificate

Back 86

Certificate revocation list (CRL)

Front 87

a trusted issuer of digital certificates

Back 87

Certification authority

Front 88

a mathematical tool for verifying no unintentional changes have been made

Back 88

Checksum

Front 89

scrambled form of the message or data

Back 89

Cipher text

Front 90

substitution at the word or phrase level

Back 90

Code

Front 91

outputs within a given function are the same result

Back 91

Collisions

Front 92

two certificate authorities that trust each other

Back 92

Cross certification

Front 93

code breaking, practice of defeating the protective properties of cryptography.

Back 93

Cryptanalysis

Front 94

code making

Back 94

Cryptography

Front 95

key

Back 95

Cryptovariable

Front 96

descrambling the encrypted message with the corresponding key

Back 96

Decipher

Front 97

try a list of words in passwords or encryption keys

Back 97

Dictionary attack

Front 98

a electronic attestation of identity by a certificate authority

Back 98

Digital certificate

Front 99

Asymmetric encryption of a hash of message

Back 99

Digital Signature

Front 100

act of scrambling the cleartext message by using a key.

Back 100

Encipher

Front 101

one way encryption

Back 101

Hash function

Front 102

The study of cryptography and cryptanalysis

Back 102

Cryptology