L2 DTP NCEA - encryption

What is plaintext? - The original readable data before encryption.

What is ciphertext? - The unreadable output produced by an encryption algorithm.

What is an encryption algorithm? - A defined procedure that transforms plaintext into ciphertext using a key.

What is decryption? - The process of recovering plaintext from ciphertext using the appropriate key.

What is a key in encryption? - A value that controls an encryption, decryption, signing, or verification operation.

What is symmetric encryption? - A type of encryption where the same secret key is used to encrypt and decrypt data.

What is asymmetric cryptography? - A method using a mathematically related public key and private key to perform different operations.

What is hashing? - A one-way process that produces a fixed-length digest from input data.

What is salt in password hashing? - A unique random value combined with a password before hashing to enhance security.

What is a digital signature? - Evidence created with a private key that can be checked with the associated public key to support integrity and authenticity.

What is a certificate in encryption? - A signed digital record that connects an identity or service to a public key.

What is key exchange? - A protocol used to establish shared key material across an untrusted network.

What is hybrid encryption? - A method where asymmetric cryptography establishes a session key, and symmetric encryption protects the main data.

What is encryption at rest? - Protection applied to stored data such as drives, files, backups, or cloud storage.

What is encryption in transit? - Protection applied while data travels through a network.

What does confidentiality mean in encryption? - Information is available only to authorized people.

What does integrity mean in encryption? - Information remains accurate and unauthorized changes can be detected.

What does authenticity mean in encryption? - There is evidence about the source or signer of information.

What does availability mean in encryption? - Authorized users can access information when needed.

What is the key exchange problem? - The challenge of securely sharing encryption keys over an untrusted network.

What is AES? - Advanced Encryption Standard, a symmetric encryption algorithm widely used for secure data transmission.

What is SHA-256? - Secure Hash Algorithm 256-bit, a cryptographic hash function that produces a fixed-size hash value.

What is the impact of encryption in healthcare? - Encryption protects sensitive patient data and ensures compliance with privacy regulations.

What is a password manager? - A tool that creates and stores complex passwords securely, often protected by multi-factor authentication.

What is a VPN? - A Virtual Private Network that encrypts internet traffic and provides secure remote access to networks.

What are WPA2/WPA3? - Wi-Fi Protected Access protocols that secure wireless networks through encryption.

What is the role of certificates in Wi-Fi security? - Certificates authenticate devices and users, ensuring secure connections in enterprise Wi-Fi environments.

What is encryption? - A method of converting information into a code to prevent unauthorized access.

What are the two main types of encryption? - Symmetric encryption and asymmetric encryption.

What is asymmetric encryption? - A type of encryption that uses a pair of keys: a public key for encryption and a private key for decryption.

What is the role of a BitLocker recovery key? - It is used to recover access to encrypted data in case the primary access method fails.

What is the SHA-256 digest? - A cryptographic hash function that produces a 256-bit hash value, commonly used for data integrity.

What is the purpose of encryption in digital communication? - To keep data private and secure from unauthorized access.

What is the Man-in-the-Middle attack? - An attack where a third party intercepts communication between two parties.

What is the Three-Pass Protocol? - A method for securely sending a message where both parties lock and unlock the message using their own keys.

What is the vulnerability of the Three-Pass Protocol? - A Man-in-the-Middle could intercept and manipulate the message, compromising security.

What is the Diffie-Hellman key exchange? - A method for two parties to securely agree on a shared secret key over a public channel.

What is the discrete logarithm problem? - A mathematical problem that underpins the security of the Diffie-Hellman key exchange.

What are the security requirements for Diffie-Hellman? - Use a large prime modulus and a good base to ensure key diversity.

What is AES encryption? - Advanced Encryption Standard, a symmetric encryption algorithm widely used for securing data.

What are the key lengths available in AES? - AES supports key lengths of 128, 192, and 256 bits.

What are the two key principles of a good cipher according to Claude Shannon? - Confusion and diffusion.

What is confusion in cryptography? - Complex relationships between the key and ciphertext that obscure the key.

What is diffusion in cryptography? - A small change in plaintext should cause widespread change in the ciphertext.

What is the one-time pad limitation? - It offers perfect secrecy only if the key is never reused.

What are some applications of AES encryption? - Secure communication, file and disk encryption, and wireless security.

How does AES ensure security? - Through a combination of substitution, shifting, mixing, and key addition.

What is the impact of poor key management in encryption? - If keys are stolen or lost, data may be exposed or inaccessible.

What are common issues with encryption in schools? - Key management, human behavior, and usability trade-offs.

What is the importance of training staff in encryption? - To ensure proper management of encryption protocols and prevent data breaches.

What is a primitive root in the context of Diffie-Hellman? - A base that ensures key diversity and security in the key exchange process.

What does AES stand for? - Advanced Encryption Standard.

What is the purpose of using modular exponentiation in Diffie-Hellman? - To compute shared keys securely without revealing private secrets.

What protocols use AES for securing Wi-Fi networks? - WPA2 and WPA3 protocols.

How do VPNs utilize AES? - VPNs use AES to encrypt network traffic, securing online activities and communications.

Why do banks use AES? - To protect sensitive information like credit card details during online transactions.

What was the purpose of NIST's call in 1997? - To establish a new encryption standard, which resulted in the creation of AES.

What is the basic encryption concept of AES? - Plaintext + Secret Key → Ciphertext.

What are the two key concepts from Claude Shannon that AES is built around? - Confusion and Diffusion.

What is the function of the Key Expansion in AES? - It expands the original key into round keys through byte transformations and constants.

What does the SubBytes step in AES do? - It replaces each byte using a non-linear substitution table (S-box) to add confusion.

What is the purpose of the ShiftRows step in AES? - To cyclically shift rows in the 4×4 byte grid, spreading byte values across columns for diffusion.

What does the MixColumns step achieve in AES? - It mathematically mixes each column's bytes to spread the influence of each byte, enhancing diffusion.

What happens during the AddRoundKey step in AES? - Each round's key is XORed with the state, binding the encryption to the key.

How many rounds does AES-128 use? - 10 rounds.

How do schools use hashing? - To store password checks safely by storing a hashed version of the password.

What is the role of WPA2/WPA3 in wireless security? - They help protect wireless communication, preventing unauthorized access to data being sent over the network.

What is device encryption? - A method that protects data on devices, such as staff laptops, preventing unauthorized access if the device is lost or stolen.

How do password managers utilize encryption? - They store many strong, unique passwords inside an encrypted vault.

What is the purpose of digital signatures? - To verify that a message or file came from the claimed sender and has not been altered.

What is a limitation of encryption? - It does not prevent users from sharing passwords or falling for phishing attacks.

What is BitLocker? - A device encryption feature that helps protect data on Windows devices.

What is the social impact of encryption in education? - It helps protect privacy, trust, and safety of students and families.

What is a recovery key in the context of BitLocker? - A key used to regain access to an encrypted device if the original password is lost.

What is plaintext in the context of encryption? - Plaintext is the original, readable data before it is encrypted.

What role do keys play in encryption? - Keys are used to encrypt and decrypt data, determining how the data is transformed.

What is the purpose of confidentiality in encryption? - Confidentiality ensures that sensitive information is accessible only to authorized users.

What does integrity mean in the context of encryption? - Integrity ensures that data has not been altered or tampered with during transmission or storage.

What is authentication in encryption? - Authentication verifies the identity of users or systems before granting access to data.

What are digital signatures? - Digital signatures are cryptographic signatures that validate the authenticity and integrity of a message or document.

How does BitLocker protect data? - BitLocker encrypts the entire drive of a device, making data inaccessible without the proper key.

What is the function of a password manager? - A password manager stores and encrypts passwords, helping users manage multiple accounts securely.

What problem does WPA2/WPA3-Enterprise address? - WPA2/WPA3-Enterprise provides individual user accounts for secure access to school Wi-Fi.

How does HTTPS/TLS protect data? - HTTPS/TLS encrypts data transmitted over the internet, ensuring secure communication between users and websites.

What is the limitation of encryption regarding lost recovery keys? - If recovery keys are lost, access to encrypted data may be permanently lost.

How can phishing impact encryption security? - Phishing can lead to stolen passwords, compromising encrypted data if unauthorized users gain access.

What is the importance of training staff and students about encryption? - Training helps users understand how to securely manage passwords and recognize security threats.

What are the consequences of a data breach in a school? - A data breach can lead to loss of trust, legal issues, and exposure of sensitive student information.

What is the trade-off between privacy and monitoring in schools? - Schools must balance the need to monitor for security threats with respecting student and staff privacy.

How does encryption affect remote access for staff? - Encryption secures remote access but requires proper management of keys and secure configurations.

What is the role of digital signatures in school documents? - Digital signatures ensure the authenticity and integrity of official documents and communications.

What is the impact of strong encryption on user convenience? - Strong encryption can complicate access and recovery processes, requiring careful management.

What is the significance of using MFA for important school accounts? - Multi-Factor Authentication (MFA) adds an extra layer of security, reducing the risk of unauthorized access.

How does encryption contribute to student privacy? - Encryption protects sensitive student data, fostering trust between families and the school.

What is the importance of auditing recovery keys? - Auditing recovery keys ensures that they are managed securely and are accessible when needed.

What should schools do to prepare for lost devices? - Schools should create clear procedures for reporting lost devices and managing encrypted data.

What is the relationship between encryption and data usability? - Encryption must be balanced with usability to ensure that authorized users can access necessary information.

What are the benefits of using cloud storage with encryption? - Cloud storage with encryption protects data from unauthorized access while allowing remote access.

What is the impact of strong passwords on encryption effectiveness? - Strong passwords enhance encryption security by preventing unauthorized access to encrypted data.