1
Q
plaintext (or cleartext)
A
unencrypted message
2
Q
ciphertext
A
an encrypted message
3
Q
cipher
A
process (or algorithm) used to encrypt and decrypt a message
4
Q
cryptanalysis
A
art of breaking or “cracking” cryptographic systems
5
Q
cryptography
A
- “secret writing”
- historically, operated using simple substitution or transposition ciphers
6
Q
security through obscurity
A
- to keep something secret by hiding it
- attempts to hide details of cipher (secret algorithm)
7
Q
transport encryption
A
confidentiality means that a message cannot be deciphered without having the appropriate cipher and key (or alternatively the means to crack the cipher)
8
Q
non-repudiation
A
- concept that the sender cannot deny sending message
- linked to identification and authentication
9
Q
T or F. Cryptography can be used to design highly resilient control systems
A
True
10
Q
control system
A
system with multiple parts, such as sensors, workstations, and servers, and complex operating logic
11
Q
obfuscation
A
- art of making a message difficult to understand
- term used in conjunction with source code used to design computer applications
- obfuscated source code is rewritten in a way that does not affect the computer compiles or executes code, but makes it difficult for a person reading the code to understand how it works
12
Q
white box cryptography
A
- attempts to protect an embedded key while preserving the functionality of the code have all been broken
- would offer much better Digital Rights Management (DRM) protection for copyright content such as music, video, and books
13
Q
substitution ciper
A
- involves replacing units (a letter or blocks of letters) in the plaintext with different ciphertext
- simple substitution ciphers rotate or scramble letters of the alphabet
- example:
ROT13 (an example of Caesarian cipher) rotates each letter 13 places (so A becomes N for instance)
“Uryyb Jbeyq” means “Hello World”
14
Q
transposition cipher
A
- units stay the same in plaintext and ciphertext, but their order is changed
- example: “HLOOLELWRD”
15
Q
rail fence cipher
A
if you’re having trouble with the transposition cipher, try arranging groups of letters into columns
16
Q
key
A
- most ciphers use a key to increase the security of the encryption process
- example: if you consider the Caesar cipher ROT13, you should realize that the key is 13
- key is important, because it means that even if the algorithm or cipher method is known, a message still cannot be decrypted without knowledge of the specific key
17
Q
T or F. Most modern ciphers are made stronger by being open to review (cryptanalysis) by third-party researchers
A
True
18
Q
keyspace
A
range of key values available to use with a particular cipher
- roughly equivalent to two to the power of the size of key
- some keys within the keyspace may be considered easy to guess (“weak”) and should not be used
- using a longer keys (2048 bits rather than 1024 bits, for instance) makes the encryption scheme stronger
19
Q
T or F. Basic substitution and transposition ciphers are vulnerable to cracking by frequency analysis
A
True
20
Q
frequency analysis
A
depends on the fact that some letters and groups of letters appear more frequently in natural language than others
21
Q
T or F. A secure cipher must exhibit the properties of confusion and diffusion
A
True
22
Q
confusion
A
- key should not be derivable from the ciphertext
- if one bit in key changes, many bits in ciphertext should change (each plaintext bit should have a 50% chance of flipping)
- same key should not be used by the algorithm in a predictable way when outputting ciphertexts from different plaintexts
- achieved by using complex substitutions, employing both whole key parts of the key to output ciphertext blocks
- confusion prevents attackers from selectively generating encrypted versions of plaintext messages and looking for patterns in their relationship to try to derive the key
23
Q
diffusion
A
- means that predictable features of the plaintext should not be evident in the ciphertext
- if one bit of the plaintext is changed, many bits in the ciphertext should change as a result
- obtained through transposition
- prevents attackers from selectively determining parts of the message
- modern ciphers must use both substitution and diffusion to resist cryptanalysis attacks
24
Q
trapdoor functions
A
basis of mathematical ciphers is to use an operation that is simple to perform one way (when all the values are known) but difficult to reverse
25
one-time pad
- an unbreakable encryption mechanism
- encryption key
- consists of exactly the same number of characters as the plaintext and must be generated by a truly random algorithm
- if used properly, one-time pads are unbreakable
26
XOR
- bitwise operation
- produces 0 if both values are the same and 1 if the values are different, or, put another way, an XOR operation outputs to truly only if one input is true and the other input is false
- advantage of XOR compared to an AND or an OR operation is that XOR has a 50% chance of outputting one or zero, whereas AND is more likely to output zero and OR is more likely to output one
- makes the ciphertext harder to analyze
27
nonce
principal characteristic of a nonce that it is never reused ("number used once")
28
initialization vector (IV)
random (or pseudo-random)
29
salt
random (or pseudo-random) number or string
30
weak cipher suites and implementations
- critical vulnerability for an organization
| - data that is being stored and processed is not secured
31
available inputs for cryptanalysis are as follows
- known ciphertext - analyst has obtained the ciphertext but has no additional information about it
- known plaintext - attacker knows or can guess some of plaintext present in ciphertext, but not its exact location or context
- chosen plaintext - attacker can submit plaintexts to the same cryptographic process to derive corresponding ciphertexts, facilitating analysis
- chosen ciphertext -
attacker can submit ciphertexts to the same cryptographic processes to derive corresponding plaintexts
32
weak key
- one that produces ciphertext that is easy to cryptanalyze
- examples of weak keys:
- DES
- RC4
- IDEA
- Blowfish
33
Random Number Generator (RNG)
- module in cryptographic implementation is critical to its strength
- two principal ways for an RNG to work:
- true random number generator (TRNG) - sample some sort of physical phenomena, such as atmospheric noise, with a high rate of entropy (lack of order)
- pseudorandom number generator (PRNG) - uses software routines to simulate randomness
34
side channel attacks
- represents a completely different approach to cryptanalysis
- monitors timing, power consumption, and electromagnetic emanation
35
resource versus security constraints
comparative strength of one cipher over another largely depends on the bit-strength of the key and the quality of the algorithm
36
low power devices
- require more processing cycles and memory space
| - slower and means they consume more power
37
low latency uses
if cryptography is deployed with a real time-sensitive channel, such as voice or video, the processing overhead on both the transmitter and receiver must be low enough not to impact the quality of the signal
38
data at rest
this means that the data is in some sort of persistent storage media
- examples:
- financial information stored in databases
- archived audiovisual media
- operational policies and other management documents
- system configuration data
39
data in transit (or data in motion)
- this is the state when data is transmitted over a network
- examples:
- website traffic
- remote access traffic
- data being synchronized between cloud repositories
40
data in use
state when data is present in volatile memory, such as system RAM or CPU registers and cache
41
cryptographic algorithms
- computer security systems:
- hash functions
- symmetric encryption
- asymmetric encryption
42
cryptographic primitive
- single hash function, symmetric cipher, asymmetric cipher
43
crypto module or API (application programming interface)
- algorithms underpinning cryptography must be interpreted and packaged as a computer program (or programming library)
44
cryptographic service provider (CSP)
- makes use of Windows crypto module to perform encryption and/or authentication services
45
hashing algorithms
widely used in computer programming to short representation of data
46
checksums
ensure validity of data
47
message digest
produces fixed length string
48
secure hash algorithm (SHA)
- one of the Federal Information Processing Standards (FIPS)
- SHA-1
- this was quickly released to address a flaw in the original SHA algorithm
- 160-bit digest
- SHA-2
- variants using longer digests (notably 256 bits and 512 bits)
49
Message Digest Algorithm (MDA/MD5)
- uses a 128-but hash value
| - no longer considered secure for password hashing or signing digital certificates
50
Research and Development in Advanced Communications Technologies in Europe (RACE)
- program set up by European Union
51
message authentication
- prove the integrity and authenticity of a message
| - one-way
52
hash-based message authentication code
key and message are combined in a way designed to be resistant to "extension" attacks against other means of generating MACs
53
symmetric encryption
- two-way encryption algorithm in which encryption and decryption are both performed by a single secret key
54
symmetric encryption
two-way encryption algorithm in which encryption and decryption are both performed by a single secret key
55
stream cipher
each byte or bit of data in plaintext is encrypted one at a time
56
rivest ciphers (Ron's Code)
- family of different encryption technologies designed by Ron Rivest
57
block cipher
plaintext is divided into equal-size blocks (usually 64- or 128-bit)
58
data encryption standard cipher
- using 64-bit blocks and 56-bit key
59
advanced encryption standard (AES)
- faster and more secure than 3DES
60
blowfish
- uses 64-bit blocks and variable key sizes
| - related cipher Twofish was developed by an extended team to enter AES competition
61
modes of operation
refers to way a cryptographic product processes multiple blocks
62
Electronic Code Book (ECB)
applies same key to each plaintext block
63
Cipher Block Chaining (CBC)
improves ciphertext integrity by applying an Initialization Vector (IV) to the first plaintext block to ensure that the key produces a unique ciphertext from any given plaintext
64
public and private keys in a key pair
- each key is capable of reversing the operation of its pair
- example:
if public key is used to encrypt a message, only the paired private key can decrypt the ciphertext produced. the publich key cannot be used to decrypt the ciphertext, even though it was used to encrypt it
65
digital signature
prove identity of sender of message and show that message has not been tampered with since sender posted it
66
digital envelop
secret key (symmetric) encryption is generally faster than public key cryptography, but public key cryptography can provide higher levels of convenience and security. therefore, often, both are used
67
digital certificates
certificate authority (CA) - validate use of public key by issuing subject with a certificate
68
transport encryption
refers to encrypting data as it is sent over a network
69
key exchange
process by which sender and receiver share key to use for encryption
70
ephemeral key
transport encryption often makes use of a different secret key for each session
71
elliptic curve cryptography (ECC)
another type of trapdoor function used to generate public/proving
72
Man-in-the-Middle (MitM) attack
typically focused on public key cryptography
73
downgrade attack
can be used to facilitate a Man-in-the-Middle attack by requesting that the server use a lower specification protocol with weaker ciphers and key lengths
74
replay attack
consists of intercepting a key or password hash then reusing it to gain access to a resource, such as the pass-the-hash attack
75
birthday attack
type of brute force attack aimed at exploiting collisions in hash functions
COMPTIA - Sec+ Textbook
flashcards
Decks in class (16)
# Cards
-
Lesson 1: Comparing & Contrasting Attacks63
-
Lesson 2: Comparing and Contrasting Security Controls27
-
Lesson 3: Assessing Security Posture with Software Tools52
-
Lesson 4: Basic Cryptography Concepts75
-
Lesson 5: Implementing Public Key Infrastructure51
-
Lesson 6: Implementing Identity and Access Management Controls52
-
Lesson 7: Managing Access Services and Accounts65
-
Lesson 8: Implementing a Secure Network Architecture67
-
Lesson 9: Installing and Configuring Security Appliances69
-
Lesson 10: Installing and Configuring Wireless and Physical Access Security69
-
Lesson 11: Deploying Secure Host, Mobile, and Embedded Systems95
-
Lesson 12: Implementing Secure Network Access Protocols33
-
Lesson 13: Implementing Secure Network Applications58
-
Lesson 14: Explaining Risk Management and Disaster Recovery Concepts74
-
Lesson 15: Summarizing Secure Application Development Concepts59
-
Lesson 16: Explaining Organization Security Concepts42
