Chapter 5 - Port Scanning

1. The science of cryptography and cryptanalysis: Cryptology 2. The process of converting readable text into unreadable series of characters and symbols: Cryptography 3. Study and practice of finding weaknesses in ciphers.: Cryptanalysis 4. Temporary or session key.: Ephemeral Key 5. Hiding or concealing a message within something else. Uses least significant bits.: Steganography 6. Shifting of the alphabet. Example is Ceasar's shift cipher.: Substitution 7. Data encrypted bit by bit. Plaintext mixed with a key stream controlled by a key. Usually implemented in hardware but requires no memory.: Stream Cipher 8. Usually implemented in software. Enciphers fixed-length chances of data. Substitution/Transposition techniques. Stronger than stream cipher but is slow and resource intensive.: Block Cipher 9. Plaintext with a random key stream to generate cipher text. If values are same result is 0 but if different result is 1.: Exclusive-OR (XOR) Operation. 10. Considered unbreakable but used only one. The strongest encryption type.: One Time Pad 11. Random values used with algorithms. Used to make a password or something else stronger by making it longer and more random. Used with both stream and block ciphers.: Initialization Vectors (IV) 12. Types of cryptography.: Hash, Symetric and Asymetric 13. Can be used on passwords to make them stranger.: Key stretching 14. Ensures data integrity. The receiving device computes a checksum and compares it to the checksum included with the file. If no match the message has been altered.: Hashing 15. What are MD5, SHA, RIPEMD, HAVAL and Whirlpool?: Common hashing functions. 16. Random value calculated into the hashing process which adds more complexity and makes it harder to conduct Rainbow Table and collision attacks.: SALT Cryptography 17. Private key cryptography using only one key to encrypt and decrypt. A.K.A. Session Key, Secret Key, Shared Key, Private Key, Same Key, Single Key: Symmetric Cryptography 18. Symmetric Key Algorithm, 64 bit block (56-bit key + 8 bit for parity), Easily Broken, Based on Lucifer Algorithm: DES (Data Encryption Standard) 19. Symmetric Key Algorithm, Applies DES three times, 168-bit key (+24 for parity): 3DES (Triple-DES) 20. Symmetric Key Algorithm, Replaced DES, 128 bit block, Rijndael algorithm, key size can be 128, 192, 256 bits.: AES (Advanced Encryption Standard) 21. Symmetric Key Algorithm, "Fastest of the symmetric algorithms", 64 bit block cipher, variable-length keys (32-448-bits): Blowfish 22. Symmetric Key Algorithm, 128-bit block cipher, variable-length keys (128, 192 or 256 bit) Finalist for AES.: Twofish 23. Symmetric Key Algorithm, 64-bit block size, variable key length (40-128 bits), Used by PGP: CAST-128 24. Symmetric Key Algorithm, 128-bit block size, variable key length (128, 160, 192, 224, 256 bits), used by PGP: CAST-256 25. Symmetric Key Algorithm, stream cipher, variable key length (0-2048 bits): RC4 (River Cipher) 26. Symmetric Key Algorithm, 64-bit block cipher, 128-bit key length, developed by the Swiss, used in PGP and other encryption software: IDEA (Internation Data Encryption Algorithm) 27. Symmetric Key Algorithm, Developed by the NSA and reliant on the Clipper Chip: Skipjack 28. Symmetric Key Algorithm, used in bluetooth for key derivation, not for encryption,: SAFER (Secure and Fast Encryption Routine) 29. Encrypts every bit of data on a disk or disk volume. Must have TPM chip.: Whole Disk Encryption 30. Uses both a public and a private key. One is used to encrypt and the other is used to decrypt. Introduced non-repudiation.: Asymmetrical Cryptography 31. Asymmetric Key Algorithm, provides only key exchange: Diffie-Hellman 32. Asymmetric Key Algorithm, provides encryption, digital signatures, key exchange, based upon the Diffie-Hellman: El Gamal 2/ 5 Cryptography 33. Asymmetric Key Algorithm, provides encryption, digital signatures, key exchange, de facto standard, first algorithm known to be suitable for signing as well as encryption, very strong but slow: RSA 34. Asymmetric Key Algorithm, provides encryption, digital signatures, key exchange, based on the idea of using points on a curve to define the public/private key, used in wireless devices and smart cards: ECC 35. Created using a message, hash and sender's private key. Non-repudiation.: Digital Signature 36. Combination of crypto systems. Symmetric for data encryption, Asymmetric for key encryption, hash for data integrity: Hybrid Cryptosystem 37. Verify integrity and data origin, value generated by running message through a symmetric key only, requires the sender and receiver share a se- cret key, provide authentication and integrity.: MAC (Message Authentication Code) 38. MAC calculated using a hash function and a symmetric key, provides authentication and integrity: HMAC 39. establishes a secure connection between two TCP-based machines. Uses a handshake method to establish a session, uses X.509v3 certificates for authentication: SSL/TLS 40. Operates much like SSL but is not interoperable with SSL. More secure having than SSL: TLS 41. HTTP over SSL, uses port 443: HTTPS 42. Developed by Netscape to provide security over standard page requests over port 80: S-HTTP 43. Secure replacement for Telnet and FTP, uses TCP port 22: SSH 44. Follows X.509 standard, provides protection for email and attachments, provides authentication, integrity, confidentiality and non-repudiation using AES, 3DES, DES or RC2, Diffie-Hellman with DSS or RSA, SHA-1 and MD5: S/MIME 45. Freeware e-mail encryption system, uses decentralized web of trust model and not X.509: PGP 46. A framework for managing private key and certificates, provides a standards for key generation, authentication, distribution and storage: PKI 3/ 5 Cryptography 47. Just key exchange, key exchanged over insecure network, endpoints are not authenticated, sam public key is used for encrypting all other keys: Diffie-Hellman Exchange (DHE) 48. Changes session key very time, key exchanged over insecure network, mutual authentication, improvement over DHE, supports Perfect Forward Secrecy.: Elliptical Curve Diffie-Hellman Ephemeral (ECDHE) 49. Organization responsible for issuing, storing, revoking and distributing certificates. Authenticates the certificates it uses by signing them with their private key.: Certificate Authority (CA) 50. Middleman between subscribers and CA. Can distribute keys, accept registrations for the CA and validate identities. Does not issue certificates on their own.: Registration Authority (RA) 51. Dictates the circumstances in which a certificate can be used. protects the CA from claims of loss if the certificate is misused. should identify the user's community, names of the CA and RA and the object identifier.: Certificate Policy 52. The root of the hierarchical trust model. Creates and signs keys for intermediate CA. Create Asymmetric Private and Public keys for themselves and Digitally Sign their own Public Keys: Trusted Root Certificate Authority (CA) 53. Detailed statement of the procedures and practices the CA uses to manage the certificates: Certificate Practice Statement 54. The formal request sent from a client to a CA asking for a certificate to be generated.: Certificate Signing Request 55. Checks on the status of a certificate. Response from the server can be revoked, valid, suspended or expired.: OCSP 56. Identifies revoked certificates: CRL 57. Explain how uses can establish a certificate's validity. Common models include Single-Authority Trust, Hierarchical Trust, Bridge Trust and Web of Trust (a.k.a. peer-to-peer): Trust Models 58. Tow or more separate authorities establish a trust relationship amongst each other.: Bridge Trust Model 59. Multiple CAs deployed throughout a single organization. CAs are subordinate to a single root CA within the organization.: Hierarchical Trust Model 60. Trust model where all parties involved trust each other equally.: Peer-Peer Trust Model 5 4/ C ryptography 61. A third-party central certifying authority signs a given key and authenticates the owner of the key. User trusts the authority and by association trust all keys issued by that authority.: Single-Authority Trust Model (Third-party Trust) 62. Key management where a centralized entity is in charge of issuing keys. PKI: Centralized Key Management 63. Key management where the end user generates their own keys. Does not provide for key escrow so key recovery is not possible.: Decentralized Key Management 64. Keys needed to decrypt ciphertext are held so that, under certain circumstances, and authorized third party may gain access to those keys. Allows for key recovery.: Key Escrow 65. Someone with authority to remove keys from escrow.: Recovery Agent 66. Requires tow or more recovery agents.There must be multiple key escrow recovery agents (N) in any given environment. A minimum number of agents (M) must work together to recover a key.: M of N Control