Module 17

Question 1

Digital signatures

Answer 1

A mathematical technique used to provide authenticity, integrity, and nonrepudiation

Question 2

How do digital signatures serve as legal proof?

Answer 2

They provide nonrepudiation of transactions therefore proving that the data exchange did take place

Question 3

What type of cryptography do digital signatures use?

Answer 3

Asymmetric cryptography

Question 4

Authentic signatures

Answer 4

The signature cannot be forged and provides proof that the signer, and no one else signed the document

Question 5

Unalterable signatures

Answer 5

After a document is signed, it cannot be altered

Question 6

Not Reusable

Answer 6

The document signature cannot be transferred to another document

Question 7

Non-repudiated

Answer 7

The signed document is considered to be the same as a physical document. The signature is proof that the document has been signed by the actual person

Question 8

Code signing

Answer 8

Used for data integrity and authentication purposes

Question 9

How is code signing used?

Answer 9

To verify the integrity of executable files downloaded from a vendor website

Question 10

What does code signing use?

Answer 10

Digital certificates to authenticate and verify the identity of the site that is the source of the files

Question 11

Digital certificates

Answer 11

These are similar to a virtual ID card and used to authenticate the identity of system with a vendor website and establish an encrypted connection to exchange data

Question 12

What are the three Digital Signature Standard (DSS)

Answer 12

Digital Signature Algorithm (DSA)
Rivest-Sharmir Adelman Algorithm (RSA)
Elliptic Curve Digital Signature Algorithm (ECDSA)

Question 13

Digital Signature Algorithm (DSA)

Answer 13

DSA is the original standard for generating public and private key pairs, and for generating and verifying digital signatures

Question 14

Rivest-Shamir Adelman Algorithm (RSA)

Answer 14

RSA is an asymmetric algorithm that is commonly used for generating and verifying digital signatures

Question 15

Elliptic Curve Digital Signature Algorithm (ECDSA)

Answer 15

ECDSA is a newer variant of DSA and provides digital signature authentication and non-repudiation with the added benefits for computational efficiency, small signature sizes, and minimal bandwidth

Question 16

Digitally signing code provides several assurances about the code:

Answer 16

The code is authentic and is actually sourced by the publisher
The code has not been modified since it left the software publisher
The publisher undeniably punished the code. This provides non-repudiation of the act of publishing

Question 17

Digital certificate

Answer 17

Equivalent to an electronic passport

Question 18

What does a digital certificate do?

Answer 18

It enables users, hosts, and organizations to securely exchange information over the internet