H12-891_V1-0 practice question 14 of 35

SSH uses asymmetric encryption algorithms AES and DES to achieve security for data transmission, and uses HMAC to ensure the complete integrity of integer data

Full set: 607 questions
Answer options
A: TRUE
B: FALSE Correct answer
Correct Answer:
B. FALSE
Explanation

The statement is false for two primary reasons. First, AES (Advanced Encryption Standard) and DES (Data Encryption Standard) are symmetric encryption algorithms, not asymmetric. SSH uses asymmetric algorithms like RSA or DSA for key exchange and authentication, but it employs symmetric algorithms like AES for encrypting the bulk data stream for performance. Second, HMAC (Hash-based Message Authentication Code) ensures the integrity of entire data packets, not just "integer data."

Why Incorrect

A (True): This option is incorrect because the statement contains fundamental inaccuracies regarding the types of encryption algorithms used by SSH for data transmission and the scope of HMAC's integrity checks.

References

1. Huawei HedEx Documentation, NE40E V800R012C10 Configuration Guide - Security, Section: "SSH Configuration". The guide states, "SSH uses asymmetric encryption algorithms (RSA, DSA, and ECC) to implement identity authentication and key exchange, and symmetric encryption algorithms (such as AES and 3DES) to encrypt data."

2. IETF RFC 4251, The Secure Shell (SSH) Protocol Architecture, Section 1: "Introduction". This RFC specifies that SSH "uses strong cryptographic techniques to protect these connections. It provides authentication, confidentiality, and integrity." It further details the use of symmetric encryption for confidentiality and MACs for integrity.

3. IETF RFC 4253, The Secure Shell (SSH) Transport Layer Protocol, Section 6.4: "Data Integrity". This section specifies the use of MAC algorithms (such as HMAC-SHA1) to protect the integrity of transmitted data.

Scroll to Top