Hash Functions and Digital Signatures Questions and Answers

Q: The responsibility of a Certification Authority (CA) for Digital Signature is to authenticate the :

A Certification Authority authenticates the public keys of subscribers.A CA issues digital certificates that bind a subscriber's identity to that subscriber's public key, signed with the CA's own private key. Anyone who trusts the CA can then trust that the public key really belongs to the named person, and so verify that person's digital signatures.A CA never sees or certifies subscribers' private keys, which must stay secret. Hash functions are standard algorithms needing no certification, and DES keys belong to symmetric encryption, not to digital signatures.

Q: A sender 'S' sends a message 'M' to receiver 'R', which is digitally signed by 'S' with its private key. In this scenario, one or more of the following security violations can take place.(1) 'S' can launch a birthday attack to replace M with a fraudulent message.(2) A third party attacker can launch a birthday attack to replace 'M' with a fraudulent message.(3) 'R' can launch a birthday attack to replace 'M' with a fraudulent message.Which of the following are possible security violations ?

Only (1) is a possible violation.A birthday attack finds two messages with the same hash, which takes about \(2^{n/2}\) work for an \(n\)-bit hash. The sender S controls what is signed, so S can prepare a pair, M and a fraudulent M', with equal hashes, sign M, and later claim that the signature was on M'. The signature is valid for both.A third party or the receiver R faces a message M already fixed and signed by S. To substitute another message they would need a second message matching that particular hash, a second-preimage attack needing about \(2^{n}\) work, not a birthday attack. So (2) and (3) are not birthday-attack violations.

Q: A sender S sends a message m to receiver R, which is digitally signed by S with its private key. In this scenario, one or more of the following security violations can take place.I. S can launch a birthday attack to replace m with a fraudulent messageII. A third party attacker can launch a birthday attack to replace m with a fraudulent messageIII. R can launch a birthday attack to replace m with a fraudulent messageWhich of the following are possible security violations ?

The possible violation is I only.A birthday attack finds two different messages with the same hash. The signer S can prepare such a pair in advance, sign the harmless one, and later claim the signature was on the other, because the signature covers only the hash. S can do this because S holds the private key and chooses what to sign.A third party or the receiver R does not control which message S signs and cannot sign a new message without S's private key, so finding a colliding pair does not let them substitute a message S signed. That rules out options including II or III.

The responsibility of a Certification Authority (CA) for Digital Signature is to authenticate the :

A.hash function used
B.private keys of subscribers
C.key used in DES
D.public keys of subscribers

Exam Year(s)

MH SET - 2020, SET Exam - 2020,

Answer: D

A Certification Authority authenticates the public keys of subscribers.

A CA issues digital certificates that bind a subscriber's identity to that subscriber's public key, signed with the CA's own private key. Anyone who trusts the CA can then trust that the public key really belongs to the named person, and so verify that person's digital signatures.

A CA never sees or certifies subscribers' private keys, which must stay secret. Hash functions are standard algorithms needing no certification, and DES keys belong to symmetric encryption, not to digital signatures.

Discuss in Forum

A sender 'S' sends a message 'M' to receiver 'R', which is digitally signed by 'S' with its private key. In this scenario, one or more of the following security violations can take place.

(1) 'S' can launch a birthday attack to replace M with a fraudulent message.
(2) A third party attacker can launch a birthday attack to replace 'M' with a fraudulent message.
(3) 'R' can launch a birthday attack to replace 'M' with a fraudulent message.

Which of the following are possible security violations ?

A.(1) and (2) only
B.(1) only
C.(2) only
D.(2) and (3) only

Exam Year(s)

MH SET - 2025, SET Exam - 2025,

Answer: B

Only (1) is a possible violation.

A birthday attack finds two messages with the same hash, which takes about \(2^{n/2}\) work for an \(n\)-bit hash. The sender S controls what is signed, so S can prepare a pair, M and a fraudulent M', with equal hashes, sign M, and later claim that the signature was on M'. The signature is valid for both.

A third party or the receiver R faces a message M already fixed and signed by S. To substitute another message they would need a second message matching that particular hash, a second-preimage attack needing about \(2^{n}\) work, not a birthday attack. So (2) and (3) are not birthday-attack violations.

Discuss in Forum

A sender S sends a message m to receiver R, which is digitally signed by S with its private key. In this scenario, one or more of the following security violations can take place.

I. S can launch a birthday attack to replace m with a fraudulent message
II. A third party attacker can launch a birthday attack to replace m with a fraudulent message
III. R can launch a birthday attack to replace m with a fraudulent message

Which of the following are possible security violations ?

A.I and II only
B.I only
C.III only
D.II and III only

Exam Year(s)

Tripura Public Service Commission - 2025,

Answer: B

The possible violation is I only.

A birthday attack finds two different messages with the same hash. The signer S can prepare such a pair in advance, sign the harmless one, and later claim the signature was on the other, because the signature covers only the hash. S can do this because S holds the private key and chooses what to sign.

A third party or the receiver R does not control which message S signs and cannot sign a new message without S's private key, so finding a colliding pair does not let them substitute a message S signed. That rules out options including II or III.

Discuss in Forum

Loading…

Topics

Other Subjects

Tags: Hash Functions and Digital Signatures Questions and Answers || Hash Functions and Digital Signatures MCQ Questions and Answers || Hash Functions and Digital Signatures GK Questions and Answers || Hash Functions and Digital Signatures GK MCQ Questions || Hash Functions and Digital Signatures Multiple Choice Questions and Answers || Hash Functions and Digital Signatures GK || GK on Hash Functions and Digital Signatures || Cyber Security Questions and Answers || Cyber Security MCQ Questions and Answers || Cyber Security GK Questions and Answers || GK on Cyber Security

Hash Functions and Digital Signatures Questions and Answers

Topics

Other Subjects

About Us

Stay informed about all important Dates & Notifications