Security+ Ports

Front 1

Trusted Platform Module (TPM)

Back 1

A chip that can store cryptographic keys, passwords, or certificates.

Front 2

Hashing

Back 2

Algorithm which performs a calculation on a message and converts it into a numeric hash value. Ensures that the data has not been altered.

Front 3

Message Authentication Mode (MAC)

Back 3

Authenticates both the source of a message and its integrity without the use of any additional mechanisms. Symmetric. Requires the sender the and receiver to share a secret key

Front 4

Hashed MACing (HMAC)

Back 4

A type of message authentication code (MAC) calculated using a specific algorithm involving a cryptographic hash function in combination with a secret key.

Front 5

Symmetric Cryptography

Back 5

Requires both ends of an encrypted message to share the same secret key.

Front 6

Data Encryption Standard (DES)

Back 6

64-bit block. Algorithm: DEA. Easily broken. Symmetric

Front 7

3DES (Triple-DES)

Back 7

Applies DES three times. 168-bit key. Symmetric. Algorithm: DEA

Front 8

Advanced Encryption Standard (AES)

Back 8

Current standard. 128 bit block. Key sizes: 128, 192, and 256 bits. Algorithm: Rijnadel. Symmetric

Front 9

Blowfish algorithm

Back 9

Symmetric

Front 10

Twofish algorithm

Back 10

Symmetric

Front 11

CAST algorithm

Back 11

Symmetric

Front 12

Rivest Cipher (RC)

Back 12

First algorithm known to be suitable for signing as well as encryption.

Front 13

RC4

Back 13

is an output feedback cipher and is most commonly used with a 128-bit key, which is repeated 16 times. A Rivest Cipher.

Front 14

Asymmetric Cryptography

Back 14

uses two keys to encrypt and decrypt data. Both a public and private key. Slower than symmetric.

Front 15

Rivest, Shamir, Adleman (RSA)

Back 15

Asymmetric algorithm. Used for encryption, digital signatures, and key exchange. Is the De Facto standard. Based on the difficult of factoring N, a product of two large prime numbers. Very slow.

Front 16

Elliptic Curve Cryptography (ECC)

Back 16

Based on the idea of using points on a curve to define the pubic/private key. Requires less computing power, therefore being used in wireless devices. Asymmetric.

Front 17

Diffie-Hellman

Back 17

Provides for Key Exchange.

Front 18

Digital Signature Algorithm (DSA)

Back 18

Used to digitally sign documents.

Front 19

Digital Signature

Back 19

Validates the integrity of the message and the sender. The message is encrypted using the encryption system, and a second piece of information, the digital signature, is added to the message.

Front 20

Brute Force Attacks

Back 20

Accomplished by applying every possible combination of characters that could be the key. Time is a factor.

Front 21

Dictionary attack

Back 21

Uses a dictionary of common words to reveal the user's password.

Front 22

Rainbow attack

Back 22

A rainbow table is a lookup table used to recover an unknown password using its known cryptographic hash, making attacks against hashed passwords feasible.

Front 23

Secure Socket Layer (SSL)

Back 23

Established a secure connection between two TCP based machines. Uses X.509v3 certificates for authentications. Vulnerabilities: small key sizes; expired digital certificates; compromised keys.

Front 24

SSL Provides for:

Back 24

Confidentiality, Message integrity, Key exchange

Front 25

SSL Default Port:

Back 25

Uses TCP port 443

Front 26

Transport Layer Security (TLS) Port:

Back 26

Uses TCP port 443

Front 27

HTTPS

Back 27

HTTP over SSL (port 443). The secure version of of HTTP. HTTPS uses SSL to secure the channel between the client and server.

Front 28

Secure Shell (SSH)

Back 28

Secures remote terminal communications. Protects against sniffing, spoofing, and man in the middle attacks. Uses a symmetric algorithm.

Front 29

Secure Shell (SSH) Port:

Back 29

Uses TCP port 22

Front 30

Secure/MIME (S/MIME

Back 30

Uses the X.509 standard requiring a personal ID from a trusted third party CA. Provides protection for email and attachments.

Front 31

Pretty Good Privacy (PGP)

Back 31

Freeware e-mail encryption system. Uses a web of trust model.

Front 32

Tunneling

Back 32

Virtual dedicated connection between two systems or networks. Sends private data across a public network by encapsulating data into other packets.

Front 33

Point-to-Point Tunneling Protocol (PPTP)

Back 33

Encapsulates and encrypts PPP packets.

Front 34

Point-to-Point Tunneling Protocol PPTP Port:

Back 34

Uses TCP port 1723

Front 35

Layer 2 Tunneling Protocol (L2TP)

Back 35

Hybrid of PPTP and L2F. No data encryption. Uses IPSec to provide data encryption and integrity. Operates at layer 2.

Front 36

Layer 2 Tunneling Protocol (L2TP)

Back 36

Uses UDP port 1701

Front 37

International Protocol Security (IPSec)

Back 37

Most widely VPN technology. Can be used to encrypt any traffic supported by IP. Includes both encryption and authentication. Operates at layer 3.

Front 38

IPSec Modes

Back 38

Transport on the LAN and Tunnel on the WAN

Front 39

Internet Key Exchange

Back 39

Standard automated method for negotiating shared secret keys in IPSEC. Used to generate, exchange, and manage keys. Uses UDP port 500.