ISSAP practice question 24 of 30
Which of the following is the process of finding weaknesses in cryptographic algorithms and obtaining the plaintext or key from the ciphertext?
Full set: 237 questionsCryptanalysis is the science of analyzing and breaking secure communication systems. It involves studying cryptographic algorithms to identify weaknesses, with the ultimate goal of defeating their security properties. This includes methods for obtaining the secret key or recovering the original plaintext from the encrypted ciphertext without having prior access to the key. Cryptanalysis is the counterpart to cryptography, which is the science of creating secure systems. The process described in the question is the exact definition of cryptanalysis.
A. Kerberos is a network authentication protocol that uses a trusted third-party to verify user identities; it is not a process for breaking cryptography.
B. Cryptography is the practice of creating and using techniques for secure communication, which is the opposite of breaking them.
C. A cryptographer is a person who studies or practices cryptography; it is a role, not a process.
1. National Institute of Standards and Technology (NIST). (2020). Recommendation for Key Management: Part 1 – General (NIST Special Publication 800-57 Part 1
Revision 5). U.S. Department of Commerce. In Appendix A
Glossary
Cryptanalysis is defined as: "The study of mathematical techniques for attempting to defeat cryptographic techniques and
more generally
information security services." (p. 66).
2. Rivest
R. L. (2012). 6.857 Computer and Network Security
Lecture 1: Introduction
Course Overview
Threat Models
Classic Ciphers. MIT OpenCourseWare. The lecture notes distinguish between Cryptography ("making codes") and Cryptanalysis ("breaking codes").
3. Stallings
W. (2017). Cryptography and Network Security: Principles and Practice (7th ed.). Pearson. In Chapter 1
Section 1.1
the text defines cryptanalysis as the techniques used for deciphering a message without any knowledge of the deciphering details
and cryptography as the art and science of making ciphers. (p. 2-3).
4. Neuman
C.
Yu
T.
Hartman
S.
& Raeburn
K. (2005). The Kerberos Network Authentication Service (V5) (RFC 4120). Internet Engineering Task Force (IETF). Section 1
"Introduction
" describes Kerberos as a "trusted third-party authentication service
" confirming it is a protocol
not a method of analysis. (p. 5).
Keep practicing
Take the free ISSAP practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other ISSAP practice questions
- Question 1Which of the following heights of fence deters only casual trespassers?
- Question 2Your customer is concerned about security. He wants to make certain no one in the outside…
- Question 3Which of the following layers of the OSI model provides non-repudiation services?
- Question 4Which of the following plans is a comprehensive statement of consistent actions to be tak…
- Question 5Which of the following user authentications are supported by the SSH-1 protocol but not b…
- Question 6Which of the following is a correct sequence of different layers of Open System Interconn…
