Examkin

Question

Difficulty: EasyCryptographic Concepts and Algorithms

A security engineer needs to ensure that software updates distributed to client workstations cannot be denied by the vendor and that their authenticity and integrity can be verified upon download. Which of the following cryptographic techniques directly provides non-repudiation?

  1. Digital signing using asymmetric cryptographyAnswer
  2. B
    File hashing using a cryptographic algorithm like SHA-256
  3. C
    Payload encryption using a symmetric algorithm like AES-256
  4. D
    Generating a Certificate Signing Request to establish public trust

Answer

Digital signing using asymmetric cryptography
Digital signing utilizes asymmetric cryptography where a sender signs a message digest with their private key. Anyone with access to the public key can verify the signature, proving that the content originated from the private key owner and was not altered, thereby establishing non-repudiation.

Step-by-Step Solution

1
Identify the primary security requirement from the scenario
The requirement is non-repudiation and origin verification for distributed software updates.
Non-repudiation prevents an entity from denying the creation or authorship of data.
2
Evaluate cryptographic mechanisms against non-repudiation criteria
Digital signatures encrypt a hash digest of the update file using the vendor's private key.
Because only the private key owner can generate the signature, verification with the corresponding public key proves authenticity and prevents denial.

Key Concept

Digital Signatures and Non-Repudiation
Rate this question

Topics

Cryptographic Concepts and Algorithms

More questions from this topic