Examkin

Soru

Zorluk: KolayCryptographic Concepts and Algorithms

A security engineer needs to ensure that software updates distributed to client workstations cannot be denied by the vendor and that their authenticity and integrity can be verified upon download. Which of the following cryptographic techniques directly provides non-repudiation?

  1. Digital signing using asymmetric cryptographyCevap
  2. B
    File hashing using a cryptographic algorithm like SHA-256
  3. C
    Payload encryption using a symmetric algorithm like AES-256
  4. D
    Generating a Certificate Signing Request to establish public trust

Cevap

Digital signing using asymmetric cryptography
Digital signing utilizes asymmetric cryptography where a sender signs a message digest with their private key. Anyone with access to the public key can verify the signature, proving that the content originated from the private key owner and was not altered, thereby establishing non-repudiation.

Adım Adım Çözüm

1
Identify the primary security requirement from the scenario
The requirement is non-repudiation and origin verification for distributed software updates.
Non-repudiation prevents an entity from denying the creation or authorship of data.
2
Evaluate cryptographic mechanisms against non-repudiation criteria
Digital signatures encrypt a hash digest of the update file using the vendor's private key.
Because only the private key owner can generate the signature, verification with the corresponding public key proves authenticity and prevents denial.

Anahtar Kavram

Digital Signatures and Non-Repudiation
Bu soruyu puanla

Konular

Cryptographic Concepts and Algorithms

Bu konudan daha fazla soru