1a set of assumptions about how attackers might interact with a cipher and what they can and can’t do.
attack model
2the attacker only sees what goes in
and out of the cipher.
black box model
3the operation that sends an input value to
some function and gets the output in return, without
exposing the details of that function.
query
4takes a plaintext and returns a
corresponding ciphertext, without revealing the secret key
encryption query
5observe ciphertexts but don’t know the associated plaintexts, and don’t
know how the plaintexts were selected.
Ciphertext-only attackers (COA)
6observe ciphertexts
and do know the associated plaintexts.
Known-plaintext attackers (KPA)
7can perform encryption queries for plaintexts of their choice and
observe the resulting ciphertexts.
Chosen-plaintext attackers (CPA)
8the attacker has access to a cipher’s implementation.
gray box model
9more realistic than black-box
models for applications.
gray box model
10a source of information that depends on the implementa-tion of the cipher, be it in software or hardware.
side channel attack
11more expensive because they require sophisticated equipment
invasive attack
12it cannot be broken, even with infinite computational resources.
unconditionally secure
13it cannot be broken with available resources, either current or future.
computationally secure
14an encryption operation for which the
plaintext input to be transformed is the ciphertext output of a previous encryption operation.
superencipherment
15the illegal effort of breaking into the back end of a system to get the
username/password combination
brute force
16technique of trying every possible decryption key
brute force attack
17a method of protecting information and
communications through the use of codes, so that only those for whom the information is intended can read and process it.
cryptography
18refers to
secure information and communication techniques
cryptography
19the process of translating plain text data
into something that appears to be random and
meaningless
encryption
20the process of
converting ciphertext back to plaintext
decryption
21means of altering data from a readable form to a
protected form and back to the readable form.
cryptography algorithms
22a mathematical
formula designed specifically to obscure the value and content
of data
cipher algorithms
23sometimes referred to as
secret-key cryptography, uses the same key to encrypt and
decrypt data
symmetric key algorithms
24a structure or scheme consisting of a set of
algorithms that converts plaintext to ciphertext to encode or
decode messages securely.
cryptosystem
25create a fixed
length of bits known as a block cipher with a secret key
symmetric key encryption algorithms
26use a pair
of keys, a public key associated with the creator/sender for
encrypting messages and a private key that only the originator
knows
asymmetric key encryption algorithms
27one that uses the same key for
encryption and decryption.
symmetric cipher
28defined by machine administrators who set policy for one computer
Can set policy that excludes modification from the user level but
not from the enterprise level
machine policy
29defined by enterprise administrators who set policy for enterprise
domains
enterprise policy
30Lowest administrable policy level
user policy
31Defined by the runtime host for setting load-time
policy
Cannot be administered
application domain policy
32an ancient trick where you just move every letter forward characters in the alphabet based on the key
caesar cipher
33refers to the abbreviated form Rotate by 13 places.
rot13 algorithm
34originates from a specific MIME content transfer encoding.
- commonly used when there is a need to encode binary data that needs to be stored and transferred over media that are designed to deal with ASCII
base64 encoding
35allows one bit to affect two substitutions, the dependency of the output bits on the input bits spreads faster
avalanche effect
36used to provide Confusion, as it is dependent on the unknown key. It is a key-less fixed substitution cipher.
sbox
37It hides the relationship between the ciphertext and the key
confusion
38It is a key-less fixed transposition cipher, but provides diffusion
pbox
39It hides the relationship between the ciphertext and the plaintext
diffusion
40
how many rounds does the des will perform
16 rounds
41how many times does the initial permutation happens and where does it perform
once and before round 1
42how does the shifting in des happens every round
43this allows one bit to affect 2 substitution, the dependency of the outputs on the input bits spread
avalanche effect
44in expansion permutation what would we need to do in order to proceed to sbox permutation
xor
45in order to perform sbox what do we need to do
46how many times does the inverse permutation happens and where does it perform
47it makes 32 bits rpt of ip expand to 48 bits
expansion permutation
48in des, what would happen if we disregard every 8 bit in our key
49what is the bit key of des
56 bits
50what field is intricately to the studies of cryptology and cryptanalysis
cryptography
51the term used to describe the scientific study focused on examining and disrupting secure forms of communication
cryptanalysis
52a collection of presumptions about an attackers potential interactions with a cipher, outlining their capabilities and limitations
attack model
53every 8 bit of the original 64th bit key is used for parity resulting into
56 bits
54describes a situation where a single bit influences two substitutions, causing the impact of input bits to extend to output bits
avalanche
55this is used to provide confusion, as it is dependent on the unknown key
sbox
56what model does the attacker can solely observe the inputs and outputs of the cipher
black box model
57it is a key-less fixed trasposition cipher, but provides diffusion
pbox
58a structure or scheme consisting of a set of algorithms that converts plaintext to ciphertext to encode or decode messages securely
cryptosystem
59identifies the type of attack that stems from information acquired through physical implementation
side channel
60an algorithm is considered as unconditionally secure if it cannot be broken with available resources, either current or future
computationally secure
61what makes the otp cipher breakable is because of uts key randomness...
unbreakable