Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
1.4
Cryptographic solutions
| Term | Definition |
|---|---|
| Cryptographic solutions | writing and solving codes to code the true meaning of information |
| Symmetric algorithm (Private key) | encryption algorithm in which both the sender and the receiver must know the same shared secret using a privately held key |
| Asymmetric algorithm (public key) | encryption algorithm where different keys are used to encrypt and decrypt the data |
| Hybrid implementation | Utilizes asymmetric encryption to securely transfer a private key that can then be used with symmetric encryption |
| Stream cipher | uses a keystream generator to encrypt data bit by bit using a mathematical XOR function to create the ciphertext |
| Block cipher | breaks the input into fixed-length blocks of data and performs the encryption on each block |
| Data encryption standard (DES) | encryption algorithm which breaks the input into 64-bit blocks and uses transposition and substitution to create ciphertext using an effective key strength of only 56 bits |
| Triple DES (3DES) | encryption algorithm which uses three separate symmetric keys to encrypt, decrypt, then encrypt the plaintext into ciphertext to increase the strength of DES |
| International data encryption algorithm (IDEA) | symmetric block cipher that uses 64-bit blocks to encrypt plaintext into ciphertext |
| Advanced encryption standard (AES) | symmetric block cipher that uses 128, 192, or 256-bit blocks and a matching encryption key size to encrypt plaintext into ciphertext |
| Digital signature | a hash digest of a message encrypted with the sender's private key to let the recipient know the doc was created and sent by the person claiming to have sent it |
| Diffie-Hellman | used to conduct key exchanges and secure key distribution over an unsecure network |
| RSA | asymmetric algorithm that relies on the mathematical difficulty of factoring large prime numbers (ex: gemalto token) |
| Elliptic curve cryptography (ECC) | heavily used in mobile devices and it's based on the algebraic structure of elliptical curves over finite fields to define its keys |
| Which is more secure: RSA or ECC | ECC |
| MD5 hashing algorithm | creates a 128-bit hash value that is unique to the input file |
| Secure hash algorithm (SHA) | each version of SHA performs a different number of rounds of mathematical computations to create the hash digest |
| RIPEMD | open-source hashing algorithm built to rival SHA, not as popular |
| Hash based message authentication code (HMAC) | used to check the integrity of a message and provides some level of assurance that its authenticity is real |
| Collision | MD5 algorithm producing the same hash for two different inputs |
| Pass the hash attack | hacking technique that allows the attacker to authenticate to a remote server by using the underlying hash of a user's password instead of requiring the actual password |
| Birthday attack | an attacker is able to send two different messages through a hash algorithm and it results in a collision |
| Key stretching | mitigates a weaker key by increasing the time needed to crack it |
| Salting | adding random data into a one-way cryptographic hash to help protect against password cracking |
| Nonce | aka "number used once," a unique often random number that is added to password-based authentication process |
| Public key infrastructure (PKI) | an entire system of hard/software, policies, procedures, and people that creates the asymmetric key pairs |
| Certificate authority | trusted third party who issues the digital certificates |
| Key escrow | processes where a secure copy of a cryptographic key is stored in a secure third-party location |
| Digital certificate | digitally signed electronic doc that binds a public key with a user's identity |
| Wildcard certificate | allows all subdomains to use the same public key certificate and have it displayed as valid |
| Single-sided certificate | only requires the server to be validated |
| Dual-sided certificate | requires both the server and user to be validated |
| Self-signed certificate | signed by the same entity whose identity it certifies |
| Third-party certificate | issued and signed by a trusted certificate authority (CA) |
| Root of trust | how each certificate is validated |
| Registration authority | requests identifying info from the user and forwards that certificate request up to the CA to create the digital certificate |
| Certificate signing request | a block of encoded text that contains info about the entity requesting the cert |
| Certificate revocation list | an online list of digital certs that the CA has already revoked |
| Online certificate status protocol (OCSP) | allows to determine the revocation status of any digital certificate using its serial number |
| OCSP stapling | allows the cert holder to get the OCSP record from the server at regular intervals |
| Blockchain | a long series of info with each block containing info, each block also contains the hash for the block before it |
| Public ledger | a record keeping system that maintains participant's identities in a secure and anonymous format |
| Trusted platform module (TPM) | secures hardware through integrated cryptographic keys |
| Hardware security module (HSM) | physical device that guards and manages digital keys |
| Key management system (KMS) | generates, distributes, and manages cryptographic keys for devices and applications |
| Secure enclave | co-processor integrated into the main processor of some devices that ensures data protection |
| Steganography | concealing a message within another so the very existence of the message is hidden |
Created by:
crly