Exam 21: Public-Key Cryptography and Message Authentication

The purpose of the algorithm is to enable two users to exchange a __________ securely that can then be used for subsequent encryption of messages.

The _________ scheme has reigned supreme as the most widely accepted and implemented approach to public-key encryption.

______ has been issued as RFC 2014, has been chosen as the mandatory-to-implement MAC for IP Security, and is used in other Internet protocols, such as Transport Layer Security.

Versions of SHA, with hash value lengths of 256, 384, and 512 bits, (SHA-256, SHA-384, and SHA 512) are collectively known as _________.

SHA-1 produces a hash value of __________ bits.

Issued as RFC 2104, __________ has been chosen as the mandatory-to-implement MAC for IP Security.

Four possible approaches to attacking the RSA algorithm are: brute force, timing attacks, _________ attacks, and chosen ciphertext attacks.

The security of any MAC function based on an embedded hash function depends in some way on the _________ strength of the underlying hash function.

In 2005, NIST announced the intention to phase out approval of _______ and move to a reliance on the other SHA versions by 2010.

The evaluation criteria for the new hash function are: security, _______, and algorithm and implementation characteristics.

__________ are alarming for two reasons: they come from a completely unexpected direction and they are a ciphertext-only attack.

One of the simplest hash functions is the ________ of every block.

Cryptographic hash functions generally execute faster in softwarethan conventional encryption algorithms such as DES.

SHA-2 shares the same structure and mathematical operations as itspredecessors and this is a cause for concern.

SHA is perhaps the most widely used family of hash functions.

The key exchange protocol is vulnerable to a man-in-the-middleattack because it does not authenticate the participants.

The operations performed during a round consist of circularshifts, and primitive Boolean functions based on DSS, MD5, SHA, and RSA.

Unlike RSA, DSS cannot be used for encryption or key exchange.

SHA-3 algorithms must be designed to resist any potentiallysuccessful attack on SHA-2 functions.

The Secure Hash Algorithm (SHA) was developed by the _________ and published as a federal information processing standard (FIPS 180) in 1993.