Examkin

Soru

Zorluk: ZorCryptographic Concepts and Algorithms

A software development team is building an automated third-party API webhook receiver to process incoming transaction status updates. The security specification requires that the receiver must verify both the data integrity and origin authenticity of each incoming payload using a shared secret key, while avoiding the processing overhead associated with public key cryptography. Which cryptographic mechanism should the team implement to meet these requirements?

  1. Hash-based Message Authentication Code (HMAC)Cevap
  2. B
    Asymmetric digital signatures using RSA with SHA-256
  3. C
    Standalone cryptographic hashing using SHA-256
  4. D
    Key derivation and stretching using PBKDF2

Cevap

The team should implement Hash-based Message Authentication Code (HMAC) to fulfill the integrity and origin authenticity requirements using a shared secret key.
Hash-based Message Authentication Code (HMAC) combines a symmetric shared secret key with a cryptographic hash function (such as SHA-256) to ensure both message integrity and sender origin authenticity. Because HMAC relies on symmetric shared secrets rather than public key infrastructure, it provides fast processing speeds suitable for high-throughput API webhooks.

Adım Adım Çözüm

1
Analyze the operational requirements provided in the scenario.
Identified the need to verify data integrity and origin authenticity using a symmetric shared secret key without public key encryption overhead.
The system requires an efficient, low-overhead cryptographic method tailored for symmetric sender authentication.
2
Evaluate candidate cryptographic mechanisms against the identified constraints.
Hash-based Message Authentication Code (HMAC) uses a symmetric key combined with a hash function (e.g., SHA-256), satisfying both integrity and origin authenticity requirements at high speed.
Only a secret-keyed hash mechanism delivers symmetric origin verification and payload integrity without asymmetric computational costs.

Anahtar Kavram

Hash-based Message Authentication Code (HMAC)
Bu soruyu puanla

Konular

Cryptographic Concepts and Algorithms

Bu konudan daha fazla soru