Hash Functions and Digital Signatures Questions and Answers

Q: The responsibility of a Certification Authority (CA) for Digital Signature is to authenticate the :

A Certification Authority authenticates the public keys of subscribers.A CA issues digital certificates that bind a subscriber's identity to that subscriber's public key, signed with the CA's own private key. Anyone who trusts the CA can then trust that the public key really belongs to the named person, and so verify that person's digital signatures.A CA never sees or certifies subscribers' private keys, which must stay secret. Hash functions are standard algorithms needing no certification, and DES keys belong to symmetric encryption, not to digital signatures.

Q: A sender 'S' sends a message 'M' to receiver 'R', which is digitally signed by 'S' with its private key. In this scenario, one or more of the following security violations can take place.(1) 'S' can launch a birthday attack to replace M with a fraudulent message.(2) A third party attacker can launch a birthday attack to replace 'M' with a fraudulent message.(3) 'R' can launch a birthday attack to replace 'M' with a fraudulent message.Which of the following are possible security violations ?

Only (1) is a possible violation.A birthday attack finds two messages with the same hash, which takes about \(2^{n/2}\) work for an \(n\)-bit hash. The sender S controls what is signed, so S can prepare a pair, M and a fraudulent M', with equal hashes, sign M, and later claim that the signature was on M'. The signature is valid for both.A third party or the receiver R faces a message M already fixed and signed by S. To substitute another message they would need a second message matching that particular hash, a second-preimage attack needing about \(2^{n}\) work, not a birthday attack. So (2) and (3) are not birthday-attack violations.

The responsibility of a Certification Authority (CA) for Digital Signature is to authenticate the :

A.hash function used
B.private keys of subscribers
C.key used in DES
D.public keys of subscribers

Exam Year(s)

MH SET - 2020, SET Exam - 2020,

Answer: D

A Certification Authority authenticates the public keys of subscribers.

A CA issues digital certificates that bind a subscriber's identity to that subscriber's public key, signed with the CA's own private key. Anyone who trusts the CA can then trust that the public key really belongs to the named person, and so verify that person's digital signatures.

A CA never sees or certifies subscribers' private keys, which must stay secret. Hash functions are standard algorithms needing no certification, and DES keys belong to symmetric encryption, not to digital signatures.

Discuss in Forum

A sender 'S' sends a message 'M' to receiver 'R', which is digitally signed by 'S' with its private key. In this scenario, one or more of the following security violations can take place.

(1) 'S' can launch a birthday attack to replace M with a fraudulent message.
(2) A third party attacker can launch a birthday attack to replace 'M' with a fraudulent message.
(3) 'R' can launch a birthday attack to replace 'M' with a fraudulent message.

Which of the following are possible security violations ?

A.(1) and (2) only
B.(1) only
C.(2) only
D.(2) and (3) only

Exam Year(s)

MH SET - 2025, SET Exam - 2025,

Answer: B

Only (1) is a possible violation.

A birthday attack finds two messages with the same hash, which takes about \(2^{n/2}\) work for an \(n\)-bit hash. The sender S controls what is signed, so S can prepare a pair, M and a fraudulent M', with equal hashes, sign M, and later claim that the signature was on M'. The signature is valid for both.

A third party or the receiver R faces a message M already fixed and signed by S. To substitute another message they would need a second message matching that particular hash, a second-preimage attack needing about \(2^{n}\) work, not a birthday attack. So (2) and (3) are not birthday-attack violations.

Discuss in Forum

Loading…

Topics

Other Subjects

Tags: Hash Functions and Digital Signatures Questions and Answers || Hash Functions and Digital Signatures MCQ Questions and Answers || Hash Functions and Digital Signatures GK Questions and Answers || Hash Functions and Digital Signatures GK MCQ Questions || Hash Functions and Digital Signatures Multiple Choice Questions and Answers || Hash Functions and Digital Signatures GK || GK on Hash Functions and Digital Signatures || Cyber Security Questions and Answers || Cyber Security MCQ Questions and Answers || Cyber Security GK Questions and Answers || GK on Cyber Security

Hash Functions and Digital Signatures Questions and Answers

Topics

Other Subjects

About Us

Stay informed about all important Dates & Notifications