CYBERSECURITY-AUDIT-CERTIFICATE practice question 14 of 25

Which of the following is a more efficient form of public key cryptography as it demands less computational power and offers more security per bit?

Full set: 134 questions
Answer options
A: Diffie-Hellman Key Agreement
B: Digital Signature Standard
C: Secret Key Cryptography
D: Elliptic Curve Cryptography Correct answer
Correct Answer:
D. Elliptic Curve Cryptography
Explanation

Elliptic Curve Cryptography (ECC) is a modern approach to public-key cryptography that offers equivalent security to older algorithms like RSA but with much smaller key sizes. For example, a 256-bit ECC key provides comparable security to a 3072-bit RSA key. This significant reduction in key size means that ECC requires less computational power for key generation, storage, and cryptographic operations. This efficiency makes it the preferred choice for resource-constrained environments such as mobile devices, smart cards, and Internet of Things (IoT) devices.

Why Incorrect

A. The traditional Diffie-Hellman algorithm is computationally intensive; its elliptic curve variant (ECDH) is efficient, but ECC is the underlying technology.
B. The Digital Signature Standard (DSS) is a standard, not a cryptographic system, and its common algorithm (DSA) is less efficient than its ECC counterpart (ECDSA).
C. Secret Key Cryptography is a different category (symmetric) and is not a form of public key cryptography, making it an invalid comparison.

References

1. National Institute of Standards and Technology (NIST), SP 800-57 Part 1 Rev. 5: Recommendation for Key Management, 2020, Table 2: "Comparable cryptographic algorithm security," shows the much smaller key sizes for ECC compared to RSA/DSA for equivalent security levels.

2. ISACA, CRISC Review Manual, 6th Edition, 2015, Chapter 2: IT Risk Identification, discusses cryptographic techniques, noting ECC's efficiency for mobile and wireless applications.

3. Koblitz, N. (1987). "Elliptic curve cryptosystems." Mathematics of Computation, 48(177), 203–209. This foundational academic paper introduced the concept of using elliptic curves for cryptography, highlighting their potential for efficiency. DOI: https://doi.org/10.2307/2007884

Scroll to Top