Practical Cryptography GXPN Practice Questions (Page 9)

Questions 41–45

1. 41expert · hard

   A security team is reviewing a cryptographic library that generates RSA keys. The library uses a random number generator that was seeded with the process ID and current time. Which vulnerability does this introduce?

   • APredictable key generation, allowing an attacker to reconstruct the private key
   • BInability to verify digital signatures
   • CVulnerability to padding oracle attacks
   • DWeak encryption due to short key length
   Reveal Solution Discussion Select an answer first
2. 42foundation · easy

   In the process of creating a digital signature, what is typically hashed before encryption with the private key?

   • AA random nonce generated for the session
   • BThe hash of the message
   • CThe public key of the recipient
   • DThe entire message in its original form
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   Which of the following is the primary use of a cryptographic hash function?

   • AEncrypting data so that it can be decrypted later
   • BExchanging secret keys over an insecure channel
   • CProviding non-repudiation for digital signatures
   • DVerifying the integrity of data
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   Which of the following is an example of a weak cryptographic key?

   • AA key that is used only once for a single session
   • BA key generated from a cryptographically secure random number generator
   • CA key derived from a predictable password using a simple hash
   • DA 256-bit key generated for AES-256
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   What is a common vulnerability associated with improper padding in block cipher modes like CBC?

   • ASide-channel attack via power analysis
   • BMan-in-the-middle attack
   • CBirthday attack
   • DPadding oracle attack
   Reveal Solution Discussion Select an answer first