Save
Busy. Please wait.
Log in with Clever
or
show password
Forgot Password?
Don't have an account?  Sign up 
Sign up using Clever
or
Username is available taken
show password


Make sure to remember your password. If you forget it there is no way for StudyStack to send you a reset link. You would need to create a new account. Your email address is only used to allow you to reset your password. See our Privacy Policy and Terms of Service.

Already a StudyStack user? Log In

Reset Password
Enter the associated with your account, and we'll email you a link to reset your password.
focusNode
Didn't know it?
click below
 
Knew it?
click below
Don't Know
Remaining cards (0)
Know
0:00
edit
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.

  Normal Size     Small Size show me how

Security + CompTIA

Domain 6 Cryptography and PKI

TermDefinition
Symmetric Key algorithms depend on a shared single key for encryption & decryption. Examples: DES 3DES RC5 & AES
Asymmetric Key Algorithms use a public key for encryption and private key for decryption Examples: RSA, Diffie-Hellman, El Gamal,& elliptic curve cryptography standards
Nonrepudiation ensures proof or origin, submission, delivery and receipt
block ciphers not as fast, encrypt on blocks of fixed length and have higher level of diffusion over stream cyphers
stream ciphers, encryption performed bit-by-bit
ROT13 substitution cipher - first half fo roman alphabet corresponds to second half and its is inverse in nature
Perfect forward secrecy or just Forward Secrecy after the session has ended when both sides destroy keys
Ephemeral Key Agreement protocols DHE ECDHE - provide forward secrecy
Bcrypt & PBKDF2 - key derivation functions used for key stretching, provide means to stretch a key or password; making it stronger
Key Scrow stores private key with a trusted third party
OCSP Stapling puts the responsibility of OCSP requests on web server instead of the issuing CA
OCSP Online Certificate Status Protocol, internet protocol used for obtaning the revocation status of an x509 digital certificate
Three Types of Validated Certificates DV, OV, EV
DV Domain Validation Certificate - assure domain is owned by the claiming party
EV Extended Validation Certificate - assures domain is owned by party and also extends the company and location in browser bar.
OV Organizational Validation - higher level of assurance - no difference to UI from DV
PEM, P7B Are ASCII encoded (letters and numbers) makes them useful for email
DER PFX binary encoded certificates
PKI public key infrastructure - enables secure data sharing among validated parties on the internet. relies on asymmetric key cryptography using certificates digitally signed blocks of data issued by a CA
PEAP encapsulates EAP (extensible authentication protocol) in a TLS tunnel, only requires a certificate on the server Thus Protected Extensible Authentication Protocol...
LEAP light weight extensible authentication protocol. no digital certificates, simply a password and you're able to communicate between authentication methods and WAP - based on Microsoft CHAP - all information travels in the clear
EAP Extensible Authentication Protocol - common set of frameworks that can be used to authenticate people into things like wireless networks, WPA2 & WPA use five different EAP types as authentication mechanisms.
CSR Certificate Signing Request - specially formatted encrypted message sent from a SSL applicant to a certificate authority.
Popular Standardized Tests sets

 

 



Voices

Use these flashcards to help memorize information. Look at the large card and try to recall what is on the other side. Then click the card to flip it. If you knew the answer, click the green Know box. Otherwise, click the red Don't know box.

When you've placed seven or more cards in the Don't know box, click "retry" to try those cards again.

If you've accidentally put the card in the wrong box, just click on the card to take it out of the box.

You can also use your keyboard to move the cards as follows:

If you are logged in to your account, this website will remember which cards you know and don't know so that they are in the same box the next time you log in.

When you need a break, try one of the other activities listed below the flashcards like Matching, Snowman, or Hungry Bug. Although it may feel like you're playing a game, your brain is still making more connections with the information to help you out.

To see how well you know the information, try the Quiz or Test activity.

Pass complete!
"Know" box contains:
Time elapsed:
Retries:
restart all cards