Certified Ethical Hacker Cryptography Fundamentals 5

Question 1

Which attack exploits the mathematics of the birthday paradox to find hash collisions?

Accepted Answer

Birthday attack

Answer

A birthday attack uses probability theory to find collisions faster than brute force.

Question 2

What type of attack extracts keys by measuring power consumption or timing of a device?

Accepted Answer

Side-channel attack

Answer

Side-channel attacks analyze physical leakage like timing, power, or electromagnetic emissions.

Question 3

Which key-stretching algorithm is designed specifically to slow down password cracking?

Accepted Answer

bcrypt

Answer

bcrypt is intentionally slow and computationally expensive to resist brute-force attacks.

Question 4

In a man-in-the-middle attack on key exchange, what does the attacker do?

Accepted Answer

Intercepts and relays communication while impersonating both parties

Answer

The attacker secretly relays and possibly alters messages between two parties who think they communicate directly.

Question 5

What is perfect forward secrecy (PFS)?

Accepted Answer

Compromise of a long-term key does not expose past session keys

Answer

PFS ensures that ephemeral session keys remain secure even if long-term keys are later compromised.

Certified Ethical Hacker Practice Test