CYBERSECURITY-AUDIT-CERTIFICATE practice question 14 of 25
Which of the following is a more efficient form of public key cryptography as it demands less computational power and offers more security per bit?
Full set: 134 questionsElliptic Curve Cryptography (ECC) is a modern approach to public-key cryptography that offers equivalent security to older algorithms like RSA but with much smaller key sizes. For example, a 256-bit ECC key provides comparable security to a 3072-bit RSA key. This significant reduction in key size means that ECC requires less computational power for key generation, storage, and cryptographic operations. This efficiency makes it the preferred choice for resource-constrained environments such as mobile devices, smart cards, and Internet of Things (IoT) devices.
A. The traditional Diffie-Hellman algorithm is computationally intensive; its elliptic curve variant (ECDH) is efficient, but ECC is the underlying technology.
B. The Digital Signature Standard (DSS) is a standard, not a cryptographic system, and its common algorithm (DSA) is less efficient than its ECC counterpart (ECDSA).
C. Secret Key Cryptography is a different category (symmetric) and is not a form of public key cryptography, making it an invalid comparison.
1. National Institute of Standards and Technology (NIST), SP 800-57 Part 1 Rev. 5: Recommendation for Key Management, 2020, Table 2: "Comparable cryptographic algorithm security," shows the much smaller key sizes for ECC compared to RSA/DSA for equivalent security levels.
2. ISACA, CRISC Review Manual, 6th Edition, 2015, Chapter 2: IT Risk Identification, discusses cryptographic techniques, noting ECC's efficiency for mobile and wireless applications.
3. Koblitz, N. (1987). "Elliptic curve cryptosystems." Mathematics of Computation, 48(177), 203–209. This foundational academic paper introduced the concept of using elliptic curves for cryptography, highlighting their potential for efficiency. DOI: https://doi.org/10.2307/2007884
Keep practicing
Take the free CYBERSECURITY-AUDIT-CERTIFICATE practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other CYBERSECURITY-AUDIT-CERTIFICATE practice questions
- Question 1Which of the following backup methods takes the MOST time for restoration of data?
- Question 2Which of the following provides an early signal of increasing risk exposures for an organ…
- Question 3An IS auditor has learned that a cloud service provider has not adequately secured its ap…
- Question 4When performing a teaming exercise, which team works to integrate the defensive tactics a…
- Question 5Which of the following defines the minimum acceptable rules for policy compliance?
- Question 6What is the PRIMARY benefit of ensuring timely and reliable access to information systems?
