Question

Difficulty: MediumCryptographic Concepts and Algorithms

A security engineer is updating the organization's cryptographic policy to cover emerging operational scenarios including IoT deployments, cloud analytics, secure password storage, and covert communication detection. Match each cryptographic concept on the left with its primary operational characteristic or security use case on the right.

  • Key StretchingIntentionally increases CPU and memory resource requirements to slow down offline brute-force password cracking attacks.
  • Homomorphic EncryptionAllows mathematical computations to be executed directly on ciphertext without requiring prior decryption.
  • Lightweight CryptographyOptimizes cipher execution for resource-constrained environments such as low-power IoT microcontrollers.
  • SteganographyConceals a secret data payload within an innocuous carrier file to obscure the existence of the communication.

Answer

Key Stretching matches with intentionally increasing CPU/memory costs to slow down brute-force attacks; Homomorphic Encryption matches with executing computations directly on ciphertext without decryption; Lightweight Cryptography matches with optimizing ciphers for resource-constrained IoT devices; Steganography matches with concealing secret data within innocuous carrier files.
Key Stretching intentionally adds computational cost to mitigate password cracking; Homomorphic Encryption enables computations on ciphertext without prior decryption; Lightweight Cryptography reduces hardware and power requirements for IoT devices; Steganography hides payloads inside innocent carrier files.

Step-by-Step Solution

1
Analyze the operational objective of Key Stretching.
Identify that functions like PBKDF2 or bcrypt introduce computational delay (work factor) during key generation or hashing to thwart offline dictionary attacks.
Slowing down hash calculations directly mitigates rapid brute-forcing.
2
Analyze Homomorphic Encryption capabilities.
Recognize that it preserves confidentiality during data processing by enabling mathematical operations directly on encrypted values.
This secures data-in-use during cloud analytics.
3
Analyze Lightweight Cryptography constraints.
Identify that algorithms such as ASCON or PRESENT are tailored specifically for small silicon footprints and microcontrollers with low memory and power availability.
Standard ciphers like AES-256 can be too resource-intensive for small embedded hardware.
4
Analyze Steganography features.
Determine that steganography hides data within cover media (e.g., LSB insertion in images) to prevent observation of the transmission.
Unlike standard encryption which makes data unreadable, steganography hides the presence of the data altogether.

Key Concept

Cryptographic Concepts and Specialized Implementation Paradigms
Estimated Time:1m 30s
Rate this question