Examkin

Soru

Zorluk: ZorCryptographic Concepts and Algorithms

A cloud security team is designing a telemetry ingestion pipeline for high-speed streaming data collected from millions of remote edge devices. The architecture requires that each transmitted payload maintain confidentiality while enabling recipient servers to verify message authenticity and integrity in a single, computationally efficient pass. Which cryptographic algorithm mode or mechanism best satisfies these operational constraints?

  1. Galois/Counter Mode (GCM)Cevap
  2. B
    RSA-4096 asymmetric encryption
  3. C
    Electronic Codebook (ECB) mode
  4. D
    Standalone SHA-256 cryptographic hashing

Cevap

Galois/Counter Mode (GCM) is the correct cryptographic mechanism as it provides authenticated encryption with high performance and parallel processing capability.
Galois/Counter Mode (GCM) combines counter-mode symmetric encryption with Galois field authentication to deliver Authenticated Encryption with Associated Data (AEAD). It provides confidentiality, integrity, and origin authenticity in a highly efficient, parallelizable structure ideal for fast streaming telemetry.

Adım Adım Çözüm

1
Analyze the scenario requirements
Identified the need for confidentiality (encryption), integrity/authenticity verification, high throughput, and low processing overhead for streaming telemetry data.
High-volume IoT ingestion requires a mechanism that combines encryption and authentication efficiently without requiring multiple heavy passes over data blocks.
2
Evaluate cryptographic mechanisms against security objectives
Authenticated Encryption with Associated Data (AEAD) modes like GCM perform symmetric block cipher encryption (CTR mode) while computing an authentication tag (Galois field multiplication) in parallel.
AEAD eliminates the need to run separate encryption and hashing routines, saving CPU cycles on edge endpoints and ingestion servers.
3
Rule out unsuitable alternatives
Asymmetric encryption (RSA) is too slow for bulk streaming; ECB mode lacks pattern protection and integrity checks; standalone SHA-256 lacks confidentiality.
Selecting symmetric AEAD modes is the standard enterprise practice for authenticated stream encryption.

Anahtar Kavram

Authenticated Encryption with Associated Data (AEAD) and Cipher Modes
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Cryptographic Concepts and Algorithms

Bu konudan daha fazla soru