Match each cryptographic primitive or mechanism to its primary operational security function in an enterprise environment.
- Ephemeral Diffie-Hellman (ECDHE)Provides perfect forward secrecy to ensure past session traffic remains secure if long-term server private keys are later compromised.
- Hash-based Message Authentication Code (HMAC)Combines a symmetric secret key with a cryptographic hash function to verify data integrity and message authenticity.
- Cryptographic Salt with PBKDF2Defends stored credential hashes against precomputed dictionary and rainbow table attacks.
- Cipher Block Chaining (CBC) ModeEnsures sequential data confidentiality by XORing each plaintext block with the preceding ciphertext block before encryption.
Answer
Ephemeral Diffie-Hellman matches providing perfect forward secrecy; HMAC matches message integrity and authenticating origin; Cryptographic Salt with PBKDF2 matches protecting password stores against rainbow tables; Cipher Block Chaining Mode matches block-level sequential data confidentiality.
Ephemeral Diffie-Hellman provides key exchange with forward secrecy; HMAC ensures keyed message integrity and authentication; Salting prevents precomputed hash lookup attacks on credentials; CBC mode encrypts data blocks in sequence using feedback from previous blocks.
Step-by-Step Solution
Key Concept
Cryptographic Primitives and Operational Security Functions