CAP Cryptography & Encryption 5

Question 1

Which concept describes the process of wrapping an encryption key with another key for secure storage or transmission?

Accepted Answer

Key encapsulation / key wrapping

Answer

Key wrapping (encapsulation) uses one key to encrypt another key, protecting it during storage or transmission while keeping it usable by authorized parties.

Question 2

What is 'key escrow' and why is it controversial in government contexts?

Accepted Answer

A process where encryption keys are deposited with a trusted third party for recovery, raising concerns about government surveillance

Answer

Key escrow deposits copies of encryption keys with a trusted third party (often government), enabling lawful access but creating controversy over potential misuse and backdoors.

Question 3

Which attack leverages timing differences in cryptographic operations to infer secret key material?

Accepted Answer

Side-channel attack

Answer

A side-channel attack exploits physical implementation characteristics—such as timing, power consumption, or electromagnetic emissions—to extract cryptographic secrets.

Question 4

In a hybrid encryption scheme, what role does asymmetric cryptography typically play?

Accepted Answer

It encrypts the symmetric session key used to protect the bulk data

Answer

Hybrid encryption uses asymmetric cryptography to securely exchange a symmetric session key, which then encrypts the actual data for performance efficiency.

Question 5

Which property of a cryptographic hash function means that given a hash output, it is computationally infeasible to find the original input?

Accepted Answer

Preimage resistance

Answer

Preimage resistance means that given a hash value h, it is computationally infeasible to find any input m such that hash(m) = h.

(CAP) Certified Authorization Professional Practice Test

(CAP) Certified Authorization Professional Practice Test

CAP Cryptography & Encryption 5