Cryptography Fundamentals Flashcards
6 cards from real Certified Ethical Hacker practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Cryptography Fundamentals flashcards as text
What is the fundamental difference between symmetric and asymmetric encryption?
Answer: Symmetric uses one shared key for both encryption and decryption; asymmetric uses a public-private key pair
Symmetric encryption uses a single shared secret key for both encryption and decryption (AES, DES), while asymmetric uses mathematically related public and private key pairs (RSA, ECC) where one encrypts and the other decrypts.
What is a hash function and what properties make it cryptographically secure?
Answer: A one-way function producing a fixed-length digest; must be collision-resistant, pre-image resistant, and deterministic
A cryptographic hash function converts arbitrary input into a fixed-length output (digest) that is practically impossible to reverse, collision-resistant (no two inputs produce the same output), and deterministic (same input always produces same output).
What is a digital certificate and what role does it play in PKI?
Answer: An electronic document binding a public key to an identity, verified by a Certificate Authority
A digital certificate (X.509) is issued by a trusted Certificate Authority, containing the entity's public key, identity information, validity period, and the CA's digital signature, enabling trust in public key authenticity.
What is the purpose of a digital signature?
Answer: To verify the authenticity and integrity of a message by proving it came from the claimed sender and wasn't altered
A digital signature is created by hashing the message and encrypting the hash with the sender's private key, allowing anyone with the sender's public key to verify both the sender's identity and message integrity.
What is steganography and how does it differ from encryption?
Answer: Hiding data within other files (images, audio) to conceal its existence, versus encryption which makes data unreadable
Steganography hides the existence of a message by embedding it within innocent-looking files (images, audio, video), while encryption makes the message unreadable but its existence is known. They can be combined.
What is a rainbow table attack?
Answer: Using precomputed tables of hash values to quickly reverse password hashes
Rainbow table attacks use large precomputed tables mapping plaintext passwords to their hash values, allowing rapid lookup of password hashes without computing each hash, defeated by using salted hashes.