Question

Difficulty: EasyCryptographic Concepts and Algorithms

A security analyst is configuring asymmetric cryptography for an enterprise web application to enable secure public key exchange and digital signatures. Which of the following cryptographic algorithms meet these specific functional requirements? (Select TWO).

  1. RSA (Rivest-Shamir-Adleman)Answer
  2. ECC (Elliptic Curve Cryptography)Answer
  3. C
    AES (Advanced Encryption Standard)
  4. D
    SHA-256 (Secure Hash Algorithm 256-bit)
  5. E
    WAF (Web Application Firewall)

Answer

The correct asymmetric cryptographic algorithms are RSA (Rivest-Shamir-Adleman) and ECC (Elliptic Curve Cryptography).
RSA (Rivest-Shamir-Adleman) and ECC (Elliptic Curve Cryptography) are both asymmetric key algorithms. They utilize mathematically linked public-private key pairs to perform key establishment and generate digital signatures for non-repudiation.

Step-by-Step Solution

1
Identify the cryptographic category required by the scenario.
The requirements demand asymmetric encryption mechanisms capable of key exchange and digital signatures.
Asymmetric cryptography utilizes public/private key pairs to enable key negotiation and non-repudiation.
2
Evaluate the algorithm options against asymmetric capability.
RSA and ECC use public/private key pairs designed for key exchange and signatures.
RSA relies on prime factorization complexity while ECC relies on algebraic curves, both fulfilling asymmetric functions.
3
Eliminate symmetric algorithms, hashing functions, and non-cryptographic security controls.
AES (symmetric bulk cipher), SHA-256 (integrity hash), and WAF (network defense control) are incorrect.
Symmetric ciphers use a shared key and cannot independently produce digital signatures, while hash functions only produce message digests.

Key Concept

Asymmetric vs. Symmetric Cryptographic Algorithm Classification
Rate this question