Applied Cryptography Final Exam
Course Introduction
Applied Cryptography explores the practical aspects of designing and implementing cryptographic systems to secure digital information. The course covers a range of cryptographic algorithms such as symmetric and asymmetric encryption, hashing, digital signatures, and key exchange protocols. Students will learn about real-world applications including secure communication, authentication, digital currencies, and data integrity verification. Emphasis is placed on understanding the strengths and limitations of different cryptographic techniques, analyzing vulnerabilities, and evaluating the security of implemented systems. Through hands-on assignments and case studies, students gain experience in applying cryptographic concepts to modern security challenges.
Recommended Textbook
Cryptography and Network Security 6th Edition by William Stallings
Available Study Resources on Quizplus 20 Chapters
842 Verified Questions
842 Flashcards
Source URL: https://quizplus.com/study-set/3983
Page 2
Chapter 1: Overview
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80023
Sample Questions
Q1) The emphasis in dealing with active attacks is on prevention rather than detection.
A)True
B)False
Answer: False
Q2) The OSI security architecture provides a systematic framework for defining security attacks,mechanisms,and services.
A)True
B)False
Answer: True
Q3) A loss of __________ is the disruption of access to or use of information or an information system.
Answer: availability
Q4) "The protection afforded to an automated information system in order to attain the applicable objectives of preserving the integrity,availability and confidentiality of information system resources" is the definition of _________ .
Answer: computer security
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: Classical Encryption Techniques
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80022
Sample Questions
Q1) The __________ consist of a set of independently rotating cylinders through which electrical pulses can flow.Each cylinder has 26 input pins and 26 output pins with internal wiring that connects each input pin to a unique output pin.
Answer: rotor machines
Q2) As with Playfair,the strength of the Hill cipher is that it completely hides single letter frequencies.
A)True
B)False
Answer: True
Q3) The methods of __________ conceal the existence of the message in a graphic image.
A)steganography
B)decryptology
C)cryptology
D)cryptography
Answer: A
Q4) All encryption algorithms are based on two general principles: substitution and
Answer: transposition
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Block Ciphers and the Data Encryption Standard
Available Study Resources on Quizplus for this Chatper
27 Verified Questions
27 Flashcards
Source URL: https://quizplus.com/quiz/80021
Sample Questions
Q1) Key sizes of __________ or less are now considered to be inadequate.
A)128 bits
B)32 bits
C)16 bits
D)64 bits
Answer: D
Q2) The __________ criterion states that output bits j and k should change independently when any single input bit i is inverted for all i,j and k.
Answer: bit independence
Q3) One criteria for an S-box is: "If two inputs to an S-box differ in exactly one bit,the outputs must also differ in exactly one bit."
A)True
B)False
Answer: False
Q4) In ___________ the statistical structure of the plaintext is dissipated into long-range statistics of the ciphertext.This is achieved by having each plaintext digit affect the value of many ciphertext digits.
Answer: diffusion
To view all questions and flashcards with answers, click on the resource link above.
Chapter 4: Basic Concepts in Number Theory and Finite
Fields
Available Study Resources on Quizplus for this Chatper
26 Verified Questions
26 Flashcards
Source URL: https://quizplus.com/quiz/80020
Sample Questions
Q1) Let S be the set of integers,positive,negative,and 0,under the usual operations of addition and multiplication.S is an __________ domain.
Q2) It is easy to find the multiplicative inverse of an element in gp)for large values of p by constructing a multiplication table,however for small values of p this approach is not practical.
A)True
B)False
Q3) The rules for ordinary arithmetic involving addition,subtraction,and multiplication carry over into modular arithmetic.
A)True
B)False
Q4) If a is an integer and n is a nonzero integer,we define a mod n to be the remainder when a is divided by n.The integer n is called the __________ and the remainder is called the residue.
Q5) If we attempt to perform polynomial division over a coefficient set that is not a field,we find that division is not always defined.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Advanced Encryption Standard
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80019
Sample Questions
Q1) The __________ is when a small change in plaintext or key produces a large change in the ciphertext.
A)avalanche effect
B)Rcon
C)key expansion
D)auxiliary exchange
Q2) The first N - 1 rounds consist of four distinct transformation functions: SubBytes,ShiftRows,AddRoundKey,and __________ .
Q3) The nonlinearity of the S-box is due to the use of the multiplicative inverse.
A)True
B)False
Q4) The S-box is designed to be resistant to known cryptanalytic attacks. A)True
B)False
Q5) Virtually all encryption algorithms,both conventional and public- key,involve arithmetic operations on integers.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above.
Page 7
Chapter 6: Block Cipher Operation
Available Study Resources on Quizplus for this Chatper
44 Verified Questions
44 Flashcards
Source URL: https://quizplus.com/quiz/80018
Sample Questions
Q1) The _________ must be a data block that is unique to each execution of the encryption operation and may be a counter,a timestamp,or a message number.
Q2) Another important mode,XTS-AES,has been standardized by the __________ Security in Storage Working Group.
A)IEEE
B)ISO
C)NIST
D)ITIL
Q3) __________ modes of operation have been standardized by NIST for use with symmetric block ciphers such as DES and AES.
A)Three
B)Five
C)Nine
D)Seven
Q4) A mode of operation is a technique for enhancing the effect of a cryptographic algorithm or adapting the algorithm for an application.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Random and Pseudorandom Number
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80017
Sample Questions
Q1) A cryptographically secure pseudorandom bit generator is defined as one that passes the least significant bit test.
A)True
B)False
Q2) In key distribution and reciprocal authentication schemes two communicating parties cooperate by exchanging messages to distribute keys and/or authenticate each other.In many cases ___________ are used for handshaking to prevent replay attacks.
A)session keys
B)nonces
C)RC4's
D)entropies
Q3) The most important and widely used stream cipher is __________ .
Q4) The security of Blum,Blum,Shub is based on the difficulty of factoring n.
A)True
B)False
Q5) Random numbers play an important role in the use of encryption for various network security applications.
A)True
B)False
Page 9
To view all questions and flashcards with answers, click on the resource link above.
Chapter 8: More Number Theory
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80016
Sample Questions
Q1) The number 37 is prime so therefore all of the positive integers from 1 to 36 are relatively prime to 37.
A)True
B)False
Q2) Two numbers are relatively prime if they have ________ prime factors in common.
A)zero
B)two
C)several
D)one
Q3) The procedure TEST takes a candidate integer n as input and returns the result __________ if n is definitely not a prime.
A)discrete
B)composite
C)inconclusive
D)primitive
Q4) Miller's test will return __________ if it fails to detect that n is not prime.
A)rejected
B)inconclusive
C)composite
D)discrete
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Public-Key Cryptography and Rsa
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80015
Sample Questions
Q1) The scrambled message produced as output is the __________ .It depends on the plaintext and the key.
Q2) A public-key encryption scheme is not vulnerable to a brute-force attack.
A)True
B)False
Q3) A trap-door one-way function is easy to calculate in one direction and infeasible to calculate in the other direction unless certain additional information is known.
A)True
B)False
Q4) A single algorithm that will calculate the greatest common divisor gcd)of two integers and,if the gcd is 1,determine the inverse of one of the integers modulo the other,is the __________ algorithm.
Q5) A __________ is one that maps a domain into a range such that every function value has a unique inverse,with the condition that the calculation of the function is easy,whereas the calculation of the inverse is infeasible.
Q6) To counter attacks such as CCAs,RSA Security,Inc. recommends modifying the plaintext using a procedure known as ___________ .
To view all questions and flashcards with answers, click on the resource link above.
Page 11
Chapter 10: Other Public-Key Cryptosystems
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80014
Sample Questions
Q1) The addition operation in elliptic curve cryptography is the counterpart of modular multiplication in RSA,and multiple addition is the counterpart of __________ .
Q2) __________ can be used to develop a variety of elliptic curve cryptography schemes.
A)Elliptic curve arithmetic
B)Binary curve
C)Prime curve
D)Cubic equation
Q3) Included in the definition of an elliptic curve is a single element denoted O and called the point at infinity or the __________ .
A)prime point
B)zero point
C)abelian point
D)elliptic point
Q4) A considerably larger key size can be used for ECC compared to RSA.
A)True
B)False
Q5) The fastest known technique for taking the elliptic curve logarithm is known as the _________ method.
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Cryptographic Hash Functions
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80013
Sample Questions
Q1) The kind of hash function needed for security applications is referred to as a __________ hash function.
Q2) The Secure Hash Algorithm design closely models,and is based on,the hash function __________ .
A)MD5
B)FIPS 180
C)RFC 4634
D)MD4
Q3) SHA-1 is very similiar in structure and in the basic mathematical operations used to __________ and SHA-0.
Q4) Message authentication is achieved using a __________ .
A)DES
B)MDF
C)SHA
D)MAC
Q5) The __________ resistant guarantees that it is impossible to find an alternative message with the same hash value as a given message.
Q6) Requirements for a cryptographic hash function include ___________ which is the one-way property.
Page 13
To view all questions and flashcards with answers, click on the resource link above.
Chapter 12: Message Authentication Codes
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80012
Sample Questions
Q1) An important characteristic of the MAC algorithm is that it needs to be reversible.
A)True
B)False
Q2) The order in which the frame check sequence and encryption functions are performed is not critical for authentication.
A)True
B)False
Q3) Any modification to a sequence of messages between parties,including insertion,deletion,and reordering is a __________ attack.
Q4) To attack MD5,the attacker can choose any set of messages and work on these offline on a dedicated computing facility to find a collision.
A)True
B)False
Q5) A brute-force attack on a MAC is easier than a brute-force attack on a hash function.
A)True
B)False
Q6) NIST SP 800-90,IEEE 802.11i,and TLS/WTLS are three ____________ based on HMAC.
To view all questions and flashcards with answers, click on the resource link above. Page 14
Chapter 13: Digital Signatures
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80011
Sample Questions
Q1) In the __________ approach only the sender knows the private key so only the sender could have produced a valid signature.
A)EDS
B)DSA
C)DSS
D)RSA
Q2) With a __________ attack the attacker is allowed to use the user as an "oracle".This means that the user may request signatures of messages that depend on previously obtained message-signature pairs.
A)adaptive chosen message
B)generic chosen
C)directed chosen message
D)known message
Q3) The first part of the Schnorr digital signature scheme is the generation of a private/public key pair.
A)True
B)False
Q4) FIPS 186 -3 incorporates digital signature algorithms based on RSA and on __________ cryptography.
To view all questions and flashcards with answers, click on the resource link above. Page 15
Chapter 14: Key Management and Distribution
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80010
Sample Questions
Q1) Although public announcement of public keys is convenient, anyone can forge a public announcement.
A)True
B)False
Q2) Master keys can be distributed in some noncryptographic way such as physical delivery.
A)True
B)False
Q3) The more frequently session keys are exchanged the more __________ they are because the opponent has less ciphertext to work with for any given session key.
A)insecure
B)streamlined
C)secure
D)obsolete
Q4) Several techniques have been proposed for the distribution of public keys.The proposals can be grouped into the following four general schemes: public announcement,publicly available directory,public-key certificates,and ____________.
To view all questions and flashcards with answers, click on the resource link above. Page 16
Chapter 15: User Authentication Protocols
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80009
Sample Questions
Q1) Examples of something the individual possesses would include cryptographic keys,electronic keycards,smart cards,and physical keys.This type of authenticator is referred to as a __________ .
Q2) Once the server verifies that the user ID in the ticket is the same as the unecrypted user ID in the message it considers the user authenticated and grants the requested service.
A)True
B)False
Q3) The principal underlying standard for federated identity is the __________ which defines the exchange of security information between online business partners.
A)OSAIS
B)SAML
C)RBAC
D)SFIL
Q4) The operating system cannot enforce access-control policies based on user identity.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above.
Chapter 16: Network Access Control and Cloud Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80008
Sample Questions
Q1) _________ defines how the TLS protocol can be encapsulated in EAP messages.
Q2) An _________ is an access point or NAS that requires EAP authentication prior to granting access to a network.
Q3) With a _________ infrastructure,the cloud infrastructure is made available to the general public or a large industry group and is owned by an organization selling cloud services.
A)hybrid cloud
B)private cloud
C)public cloud
D)community cloud
Q4) The _________ is the node that is attempting to access the network and may be any device that is managed by the network access control system.
A)AR
B)RAS
C)IP
D)PS
Q5) The Extensible Authentication Protocol supports multiple authentication methods.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 18
Chapter 17: Transport-Level Security
Available Study Resources on Quizplus for this Chatper
26 Verified Questions
26 Flashcards
Source URL: https://quizplus.com/quiz/80007
Sample Questions
Q1) __________ refers to the combination of HTTP and SSL to implement secure communication between a Web browser and a Web server.
Q2) The certificate message is required for any agreed on key exchange method except fixed Diffie-Hellman.
A)True
B)False
Q3) The World Wide Web is fundamentally a client/server application running over the Internet and TCP/IP intranets.
A)True
B)False
Q4) _________ attacks include impersonating another user,altering messages in transit between client and server and altering information on a Web site.
A)Active
B)Passive
C)Shell
D)Psuedo
Q5) A signature is created by taking the hash of a message and encrypting it with the sender's _________ .
To view all questions and flashcards with answers, click on the resource link above. Page 19
Chapter 18: Wireless Network Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80006
Sample Questions
Q1) In order to accelerate the introduction of strong security into WLANs,the Wi-Fi Alliance promulgated __________ as a set of security mechanisms for the Wi-Fi standard.
Q2) The use of 802.1X cannot prevent rogue access points and other unauthorized devices from becoming insecure backdoors.
A)True
B)False
Q3) The principal threats to wireless transmission are eavesdropping, altering or inserting messages,and disruption.
A)True
B)False
Q4) The master session key is also known as the __________ key.
A)AAA
B)GTK
C)MIC
D)STA
Q5) In simple terms,the wireless environment consists of three components that provide point of attack: the endpoint,the ______________,and the access point.
To view all questions and flashcards with answers, click on the resource link above.
Page 20
Chapter 19: Electronic Mail Security
Available Study Resources on Quizplus for this Chatper
45 Verified Questions
45 Flashcards
Source URL: https://quizplus.com/quiz/80005
Sample Questions
Q1) For the __________ subtype the order of the parts is not significant.
A)multipart/mixed
B)multipart/digest
C)multipart/alternative
D)multipart/parallel
Q2) The MIME-Version field must have the parameter value 1.0 in order for the message to conform to RFCs 2045 and 2046.
A)True
B)False
Q3) A means of generating predictable PGP session keys is needed.
A)True
B)False
Q4) The _________ transfer encoding,also known as radix-64 encoding,is a common one for encoding arbitrary binary data in such a way as to be invulnerable to the processing by mail-transport programs.
Q5) E-mail is the most common distributed application that is widely used across all architectures and vendor platforms.
A)True
B)False
To view all questions and flashcards with answers, click on the resource link above. Page 21
Chapter 20: Ip Security
Available Study Resources on Quizplus for this Chatper
44 Verified Questions
44 Flashcards
Source URL: https://quizplus.com/quiz/80004
Sample Questions
Q1) A _________ is a one way relationship between a sender and a receiver that affords security services to the traffic carried on it.
A)SAD
B)SPD
C)SA
D)SPI
Q2) The _________ facility enables communicating nodes to encrypt messages to prevent eavesdropping by third parties.
A)security
B)key management
C)authentication
D)confidentiality
Q3) Any traffic from the local host to a remote host for purposes of an IKE exchange bypasses the IPsec processing.
A)True
B)False
Q4) Three different authentication methods can be used with IKE key determination: Public key encryption,symmetric key encryption,and _________ .
To view all questions and flashcards with answers, click on the resource link above.
Page 22