Exam 4: Advanced Cryptography and PKI

A certificate repository (CR)is a publicly accessible centralized directory of digital certificates.

What cryptographic transport algorithm is considered to be significantly more secure than SSL?

Which of the following certificates verifies the identity of the entity that has control over the domain name?

What protocol,developed by Netscape in 1994,is designed to create an encrypted data path between a client and server that could be used on any platform or operating system?

What allows an application to implement an encryption algorithm for execution?

A document that describes in detail how a CA uses and manages certificates,as well as how end users register for a digital certificate,is known as?

What type of trust model has a single CA that acts as a facilitator to interconnect all other CAs?

Some CAs issue only entry-level certificates that provide domain-only validation.

What is a value that can be used to ensure that plaintext,when hashed,will not consistently result in the same digest?

Root digital certificates are should never be self-signed.

Which of the following is an input value that must be unique within some specified scope,such as for a given period or an entire session?

What is a cipher suite?

What is a cryptographic key?

What process links several certificates together to establish trust between all the certificates involved?

Explain how Cipher Block Chaining (CBC)operates.

What protocol uses SSL or TLS to secure communications between a browser and a web server?

The Authentication Header (AH)protocol is a part of what encryption protocol suite below?

What block cipher mode of operation encrypts plaintext and computes a message authentication code to ensure that the message was created by the sender and that it was not tampered with during transmission?

Select the term that is used to describe a trusted third-party agency that is responsible for issuing digital certificates:

What block cipher mode of operation uses the most basic approach where the plaintext is divided into blocks,and each block is then encrypted separately?