StudyXY
RegisterLog in
Information Technology /Security+ (SY0-701): Cryptographic Solutions Part 5

Security+ (SY0-701): Cryptographic Solutions Part 5

Information Technology27 CardsCreated about 2 months ago

This deck covers key concepts from Lesson 3, Part 5, focusing on cryptographic solutions such as salting, key stretching, blockchain, and various encryption methods.

PrintEmbedImportReport

What is the purpose of 'salting' and 'key stretching'?

Help to protect password-derived cryptographic secrets from discovery through cryptanalysis.
Tap or swipe ↕ to flip
Swipe ←→Navigate
SSpeak
FFocus
1/27

Key Terms

Term
Definition
What is the purpose of 'salting' and 'key stretching'?
Help to protect password-derived cryptographic secrets from discovery through cryptanalysis.
Define a 'salt' or the process of 'salting'
Adds a random value to each plaintext input.
Define a 'salted hash’
The combination of a password and salt, input into a hashing algorithm outputs a salted hash.
Why is salting crucial for secure password storage?
Mitigates the risk that if users choose identical plaintext passwords, there won’t be identical hash values in the password file.
Define 'Key Stretching'
A salted hash repeatedly inserted into a hashing algorithm to multiply length and disorder.
Define 'Blockchain'
A decentralized/public ledger containing a growing list of records secured using cryptographic hashing.
Log in to view all terms

Related Flashcard Decks

Information Technology

Security+ (SY0-701): Additional Knowledge

This flashcard set explores various cybersecurity topics including credential-stuffing attacks, data classification (e.g., private data), and key disaster recovery metrics like RTO. It also highlights protective measures such as hashing for data integrity, automation support challenges, and the use of URL scanning in web filtering to prevent malware infections.

10 cards
View Deck
Information Technology

Security+ (SY0-701): Cert Master Practice: 5.0 Security Program Management and Oversight

This flashcard set covers key concepts in cybersecurity governance frameworks, including centralized governance, data stewardship roles, and compliance laws like SOX. It also addresses environments supporting development and change management, as well as recovery strategies like Recovery Point Objective (RPO) to minimize data loss during system failures.

8 cards
View Deck
Information Technology

Security+ (SY0-701): Cert Master Practice: 4.0 Security Operations

This flashcard set explores advanced cybersecurity practices including refining SIEM alert handling, email security protocols (DKIM, DMARC), secure authentication methods, and strategic threat-hunting. It emphasizes how to enhance incident response efficiency and leverage proactive defense techniques like maneuvering to counteract potential threats.

11 cards
View Deck
Information Technology

Security+ (SY0-701): Cert Master Practice; 2.0 Threats, Vulnerabilities, and Mitigations

This deck covers key concepts related to threats, vulnerabilities, and mitigations in cybersecurity, focusing on virtual machine security.

1 cards
View Deck
Information Technology

Security+ (SY0-701): Cert Master Practice; 1.0 General Security Concepts

This flashcard deck covers key concepts from the Security+ (SY0-701) exam, focusing on general security concepts such as technical and operational controls, policy enforcement, and tokenization.

6 cards
View Deck
Information Technology

Security+ (SY0-701): Lesson 16: Summarize Data Protection Part 2

This flashcard deck covers key concepts from the Security+ (SY0-701) Lesson 16, focusing on data protection methods, DLP components, and security awareness training.

25 cards
View Deck

Study Tips

  • Press F to enter focus mode for distraction-free studying
  • Review cards regularly to improve retention
  • Try to recall the answer before flipping the card
  • Share this deck with friends to study together
Security+ (SY0-701): Cryptographic Solutions Part 5
TermDefinition
What is the purpose of 'salting' and 'key stretching'?
Help to protect password-derived cryptographic secrets from discovery through cryptanalysis.
Define a 'salt' or the process of 'salting'
Adds a random value to each plaintext input.
Define a 'salted hash’
The combination of a password and salt, input into a hashing algorithm outputs a salted hash.
Why is salting crucial for secure password storage?
Mitigates the risk that if users choose identical plaintext passwords, there won’t be identical hash values in the password file.
Define 'Key Stretching'
A salted hash repeatedly inserted into a hashing algorithm to multiply length and disorder.
Define 'Blockchain'
A decentralized/public ledger containing a growing list of records secured using cryptographic hashing.
How does 'Blockchain' function?
A record (block) is has a hash value, the hash value of the previous record is added to the hash calculation of the next record in the chain.
What is security benefit of blockchain?
Ensures integrity of all historical records (blocks); Each block validates the hash of the previous block.
Where are blockchain records kept?
Recorded in an open public ledger.
Define an 'open public ledger'
Distributed public record of transactions.
Define the means of which a ledger is made open to the public
Decentralized peer-to-peer (P2P) network.
What is the purpose of a decentralized peer-to-peer (P2P) network?
Mitigate the risks a of a single point of failure/compromise ensuring equal trust between users.
What are the potential applications of blockchain technology?
Ensure the integrity and transparency of financial transactions, legal contracts, copyright and intellectual property (IP) protection, online voting systems, identity management systems, and data storage.
Define 'Obfuscation'
Security through obscurity; Technique that 'hides' or 'camouflages' code or data so that it is difficult to find.

What are 3 forms of obfuscation?

  1. Steganography

  2. Data masking

  3. Tokenization

Define 'Steganography'
Hiding the presence of data, often by embedding information within a file or other entity called 'covertext'
Define 'De-identification'
Obfuscates personal data from databases so that it can be shared without compromising privacy.
Define 'Data masking'
De-identification method; Generic/placeholder labels are substituted for real data while preserving the structure or format of the original data.
Define 'Tokenization'
De-identification method where a unique token is substituted for real data.
How is a token stored, and how can it be interacted with?
Token is stored with the original value on a dedicated token server/vault; An authorized query or app can retrieve the original value from the vault.
In an FDE product, what type of cipher is used for a key encrypting key (KEK)?
An asymmetric cipher (RSA or ECC) private key.
In an FDE product, what type of cipher is used for a data encrypting key (DEK)?
A secret symmetric key to perform bulk encryption of a disk.
What is the primary reason to avoid the use of MD5?
Propensity for collisions.
What cipher and key length is best practice for asymmetric key pair signing?
RSA 2,048-bit or ECC 256-bit.
What cipher and key length is best practice for asymmetric key pair exchange?
RSA 2,048-bit or ECDHE 256-bit.
What cipher and key length is best practice for a symmetric secret key?
AES-128 or AES-256
What cipher and key length is best practice for hashing?
SHA256 or SHA512; MD5 allowed for documented compatibility requirements.