Cissp - Domain 4 - Cryptography

Front 1

The science that involves the use of codes and cyphers to obscure the meaning of a message.

Back 1

Cryptology

Front 2

The science of protecting data so that it may be stored and transmitted between parties while preserving confidentiality and/or integrity.

Back 2

Cryptography

Front 3

The science of breaking cryptographic algorithms to obtain the secret message without authorization.

Back 3

Cryptanalysis

Front 4

Sets of techniques that implement cryptography.

Back 4

Cryptosystems

Front 5

The mathematical function used to encrypt and decrypt messages.

Back 5

Algorithm

Front 6

The binary sequence used to provide secrecy to the algorithm.

Back 6

Key

Front 7

The original message in an unencrypted readable form.

Back 7

Plaintext

Front 8

The encrypted version of the message, unreadable without the correct algorithm and key.

Back 8

Ciphertext

Front 9

The practice of transforming plaintext into ciphertext with an algorithm and key.

Back 9

Encryption

Front 10

The practice of transforming ciphertext into plaintext with an algorithm and key.

Back 10

Decryption

Front 11

Symbols or words used to represent other words or phrases.

Back 11

Codes

Front 12

Mathematical functions to transform bits or characters into other bits or characters.

Back 12

Ciphers

Front 13

Two types of ciphers.

Back 13

Block, stream

Front 14

Ciphers that work on plaintext and ciphertext in chunks of a discrete size.

Back 14

Block

Front 15

Chipers that work on plaintext and ciphertext in a bitwise or characterwise fashion.

Back 15

Stream

Front 16

Random numbers used to introduce unpredictability into a cryptosystem.

Back 16

Nonces

Front 17

Logical function that is true only when both arguments are true.

Back 17

AND

Front 18

Logical function that is true when one or both of the arguments are true,

Back 18

OR

Front 19

Logical function that is true only when one or both elements are false.

Back 19

NAND (not AND)

Front 20

Logical function that is true only when both elements are false.

Back 20

NOR (not OR)

Front 21

Logical function that is true only when a single argument is false.

Back 21

NOT

Front 22

Logical function that is true only when one of the elements is true and the other is false.

Back 22

XOR (exclusive OR)

Front 23

Function that is equal to the remainder after performing integer division.

Back 23

Modulo

Front 24

A mathematical function that is easy to compute but practically impossible to compute the inverse operation.

Back 24

One way function

Front 25

A historical cipher that is generated by shifting each character three places to the right.

Back 25

Caesar cipher

Front 26

Ciphers that use multiple alphabets on a rotating basis.

Back 26

Polyalphabetic substitution

Front 27

Ciphers that move the letters of a message around in a manner that obscures their meaning.

Back 27

Transformation

Front 28

Ciphers that make use of a one time pad that uses a new key for each message, preventing most cryptanalysis techniques.

Back 28

Vernam

Front 29

Ciphers that use an extremely long key, usually drawn from a source such as a book.

Back 29

Running

Front 30

Two parties communicate with each other using the same secret key to encrypt and decrypt messages.

Back 30

Secret key cryptography.

Front 31

Once the only federally approved symmetric cryptosystem.

Back 31

DES

Front 32

Four modes of DES encryption.

Back 32

ECB, CBC, CFB, OFB

Front 33

DES modes that allow errors to propagate.

Back 33

CBC, CFB

Front 34

DES modes that do not allow errors to propagate.

Back 34

ECB, OFB

Front 35

Encryption that uses DES to encrypt the same message using two or three different keys.

Back 35

Triple DES (3DES)

Front 36

Key length of DES.

Back 36

56 bits

Front 37

Block size of DES

Back 37

64 bit

Front 38

Key length of 3DES.

Back 38

168 bits

Front 39

Four modes of 3DES.

Back 39

DES-EEE3, DES-EDE3, DES-EEE2, DES-EDE2

Front 40

3DES method using three different keys in encrypt mode.

Back 40

DES-EEE3

Front 41

3DES mode using three different keys, two in encrypt mode and one in decrypt mode.

Back 41

DES-EDE3

Front 42

3DES mode using two different keys to perform three encryption operations.

Back 42

DES-EEE2

Front 43

3DES mode using two different keys to perform two encryption operations and one decrypt operation.

Back 43

DES-EDE2

Front 44

Cipher used by AES.

Back 44

Rijndael block cypher

Front 45

AES key lengths.

Back 45

128, 192, 256

Front 46

AES block length.

Back 46

128 bits

Front 47

Effective block length of 3DES when using two keys.

Back 47

112 bits

Front 48

Effective block length of 3DES when using three keys.

Back 48

168 bits

Front 49

Symmetric algorithms.

Back 49

DES, 3DES, CAST, SAFER, Skipjack, Blowfish, Twofish, RC*, IDEA

Front 50

Blowfish key length.

Back 50

32 to 448 bits

Front 51

Twofish key length.

Back 51

256 bits

Front 52

Twofish block length

Back 52

128 bits

Front 53

RC5 key length.

Back 53

up to 2048 bits

Front 54

RC5 block length.

Back 54

32, 64, or 128 bits

Front 55

IDEA key length.

Back 55

128 bits

Front 56

IDEA block length.

Back 56

64 bits

Front 57

The use of image manipulation techniques to hide information in messages.

Back 57

Steganography

Front 58

Asymmetric algorithms.

Back 58

RSA, El gamal, Merkle-hellman knapsack, Elliptic curve, diffie-hellman, LUC

Front 59

Using asymmetric algorithms to certify the integrity of a message while in transit and ensure nonrepudiation.

Back 59

Digital signature.

Front 60

Hash that produces a 128 bit digest.

Back 60

MD5

Front 61

Hash that produces a 160 bit digest.

Back 61

SHA-1

Front 62

Hash that produces a 256 bit digest.

Back 62

SHA-256

Front 63

Hash that produces a 512 bit digest.

Back 63

SHA-512

Front 64

The most common form of encrypted email.

Back 64

Secure multipurpose internet mail extensions (S/MIME)

Front 65

Competitor for S/MIME that is not as commonly used.

Back 65

MIME object security standard (MOSS)

Front 66

Mail encryption that uses 3DES, RSA, MD5, and X.509.

Back 66

Privacy enhanced mail (PEM)

Front 67

Mail encryption that uses a web of trust to allow users to vouch for each others keys.

Back 67

Pretty good privacy (PGP)

Front 68

A standard proposed by netscape and commonly used to secure communications over the web and other internet protocols.

Back 68

Secure sockets layer (SSL)

Front 69

A standard proposed by credit card issuers but never became widely adopted.

Back 69

Secure electronic transaction (SET)

Front 70

A follow on protocol to SSL used to secure application level protocols.

Back 70

Transport layer security (TLS)

Front 71

Solves the problem of distributing authenticated public keys among users of asymmetric cryptosystems.

Back 71

Public key infrastructure (PKI)

Front 72

Certificates that PKI is based on.

Back 72

X.509 v3

Front 73

Guesses a cryptographic key by exhaustively checking all of the possibilities.

Back 73

Brute force

Front 74

Looks for weaknesses in the cryptopgraphic algorithm itself or in a particular software or hardware implementation.

Back 74

Vulnerability exploit

Front 75

Uses a mathematical analysis of a message to break the cryptosystem.

Back 75

Statistical

Front 76

Begins with an attacker having knowledge of a plaintext message and the corresponding ciphertext.

Back 76

Known plaintext

Front 77

Occurs when the attacker is able to determine the ciphertext that corresponds to a plaintext message of their choosing.

Back 77

Chosen plaintext

Front 78

Occurs when the attacker is able to determine the plaintext message that corresponds to a ciphertext of their choosing

Back 78

Chosen ciphertext

Front 79

Occurs when the attacker is able to find two plaintext messages that generate the same ciphertext,

Back 79

Birthday attack

Front 80

Occurs when an attacker has the plaintext and ciphertext and is able to use both simultaneously to determine the secret key

Back 80

Meet in the middle attack

Front 81

Occurs when the attacker is able to trick both communicating parties into thinking that they are communicating with each other when they are both actually communicating with the attacker who is relaying messages.

Back 81

Man in the middle attack

Front 82

Occurs when an attacker is able to obtain the ciphertext and later use it to impersonate the transmitter by simply using the same ciphertext even though they may not know the corresponding plaintext

Back 82

Replay

Front 83

Substitution cipher that uses a different alphabet for each letter of the plaintext message.

Back 83

One time pad

Front 84

Generates a unique message output value derived from the content of a message.

Back 84

Message digest

Front 85

A mechanism to prove knowledge of a fact to a third party without revealing the fact itself to that third party.

Back 85

Zero knowledge proof

Front 86

Protects entire communication circuits by creating a secure tunnel between two points.

Back 86

Link encryption

Front 87

Protections communications between two parties and is performed independently of link encryption.

Back 87

End to end encryption