Cryptography - Unit Wise Questions

        a. The larger the size of key space, the more secures a cipher? Justify your answer.

        a. Suppose a key logger program intercepts user password and is used to modify the user account. Now, justify whether it’s a violation of confidentiality, integrity, or availability or some of combination of them. 

        a. List and briefly define types of cryptanalytic attacks based on what is known to the attacker.

        a. Difference between monoalphabetic substitution ciphers and polyalphabetic substitution ciphers.

        a. All classical ciphers are based on symmetric key encryption. What does that mean?

        b. What do you mean by reply attacks? Describe with an example. 

        a. How monoalphabetic substitution differs from polyalphabetic. Briefly define with suitable example.

        b. The larger the size of the key space, the more secure a cipher? Justify your answer.

        c. What is the importance of Trap Door function in cryptography?

        b. What are the two building blocks of all classical ciphers?

        b. What makes Vigenere cipher more secure than say, the Playfair cipher?

            d. Define each of the terms confidentiality, integrity and availability. 

        d. Differentiate between transposition cipher and substitution cipher?

        d. how Vignere Cipher can be used to ensure poly-alphabetic substitution?

        c. Mention the advantages of using stream ciphers over block ciphers. 

        d. What are the characteristics of a stream cipher?

        d. How chosen plaintext attack differs from chosen ciphertext attack?

5. Distinguish between stream cipher and block cipher. Encrypt the message WE ARE IN SAME RACE UNTIL OUR LIVE END using Rail fence cipher using 4 as number of rails.

        g. John copies Mary’s homework. Does it violate confidentiality or integrity or both? Justify.

        g. John obtains Peter's credit card number and performs shopping. Does it violate confidentiality or integrity or both? Justify.

2.

    a) What do you mean by transposition cipher? Decrypt the ciphertext UIESTNVRIY using the Railfence cipher using the rail size 2.

        g. Give an example for a situation that compromise in confidentiality leads to compromise in integrity.

    b) Encrypt the message “MEET ME TONIGHT” using the Hill cipher with the key . Show your calculations and the result.

    b) Construct a playfair matrix with the key “KEYWORD”. Using this matrix encrypt the   message “WHY DON’T YOU”.                                                                                            (4)

3.     a) Configure a Vigenere table for the characters from A-H. Use the table to encrypt the text DAD CAFE EACH BABE using the key FADE.                                                      [4]

    b) Construct a playfair matrix with the key CRYPTO. Using this matrix encrypt the message "have a nice day".

11. Write down any two limitations of MAC? What does policy and mechanism mean in cryptography? Describe with a scenario.

    b) Construct a playfair matrix with the key EXAMPLE. Using this matrix encrypt the message “Hide the Gold”.                                                                                                 

4. a. Encrypt the message "computing for human life" to playfair cipher using key "BSCCSIT".

4. a) Encrypt the message “machine passed turing test” to playfair cipher using key “ALANTURING”.                                                                                                             

4.     a) Encrypt the message “help” using the Hill cipher with the key . Show your calculations and the result.  [4] 

    b) Encrypt the message "Eight Ten" using the Hill cipher with the key . Show your calculations and the result.

    b) Given the plaintext ”LOST IN PARADISE”, compute the ciphertext for

i. The Ceaser cipher with key = 5

            ii. The Railfence cipher with rails = 4                                                                         

    b) Encrypt the message “NANI” using the Hill cipher with the key . Show your calculations and the result.                                                                                                 

    b) Given the plaintext “ABRA KA DABRA”, compute the ciphertext for                       (4)

i. The Ceaser cipher with key = 8

ii. The Railfence cipher with rails = 3

    b) Define field. Differentiate between public key cryptography and private key cryptography.                                                                                                                     

1. Among monoalphabetic and polyalphabetic cipher, which one is more vulnerable? Justify your statement. Which types of keys are considered as weak keys in DES? Explain round operations in IDEA.

        a. Why the procedure used during encryption-decryption process of DES is often known as managing or criss-crossing? 

        b. Find Multiplicative inverse of each nonzero elements in Z₅.

        c. Find Multiplicative inverse of each nonzero element in Z6. 

              c. What is the purpose of S-Box in DES? 

        c. What do you mean by avalanche effect?

        c. Explain the concepts of diffusion and confusion as used in DES.

        d. How many rounds are used in AES and what does the number of rounds depend on?

        c. Des encryption was broken in 1999. Does that make this an unimportant cipher? Why do you think that happened?

        e. Using extended Euclidean Algorithm, find multiplicative inverse of 550 and 1769.

        e. What does Z_n refer to in cryptography? Illustrate with an example.

        d. What does a field have, that an integral domain does not? Why is Zn not an integral domain?

        d. When does a set become a group?

        e. What does Z_n refer to in cryptography? Illustrate with an example.

        e. What is the difference between the notation a mod n and the notation a ≡ b (mod n)?

        e. Does a field contain a multiplicative inverse for every element of the field?

        e. What do you mean by multiplicative inverse? Find multiplicative inverse of each nonzero elements in Z₁₁.

        f. What is the additive inverse of 2 in Z₁₀?

        g. What do you mean by odd round in IDEA?

        f. What are the four steps that are executed in a single round of AES processing?

        f. Even though we have a strong algorithm like 3-DES, still AES is preferred as a reasonable candidate for long term use. Why?

        g. How many rounds are used in AES and what does the number of rounds depend on?

        g. Briefly describe SubBytes and ShiftRows in AES. 

2. a) What do you mean by “Fiestel Structure for Block Ciphers”? Explain.                       

2.     a) What is Euclid’s algorithm for finding the GCD of two numbers? Explain.                (5)

OR

What is Euler’s theorem? What is the totient of a prime number? 

2. a) Describe Extended Euclidean Algorithm. Use this algorithm to test whether any two number n1, n2 are co-prime or not?                                                   

    b) Consider the message blocks m1, m2, m3. If the Cipher Block Chaining mode DES encryption can be expressed as  Now, write the expressions for the DES decryption to extract each of the message blocks m1, m2, m3.

2.     a) What do you mean by a "Feistel Structure for Block Ciphers"? Explain.                     (5) 

2.    a) The notation Zn stands for the set of residues. What does that mean? Why is Zn not a finite field? Explain.         (5) 

    b. Find the multiplicative inverse of 11 in Z₂₆ using extended Euclidean algorithm.

       b) Find the multiplicative inverse of each nonzero element in Zn.                                   (5)

        b) Divide 23x² + 4x + 3 by 5x + c, assuming that the polynomials are over the field Z₇.      (5)    

3. a. Find the result of the following operations.

        i) 27 mod 5        ii) 36 mod 12        iii) -18 mod 14        iv) -7 mod 10        v) -13 mod 7

    b) How IDEA operates on 64-bit blocks using 128-bit key? Describe each round of operations that IDEA follows to generate ciphertext of a 64-bit input message block.    

          b) Calculate the result of the following if the polynomial are over GF(2):                       (5)

    (x⁴ + x² + x + 1) + (x³+1)

    (x⁴ + x² + x + 1) – (x³+1)

    (x⁴ + x² + x + 1) x (x³+1)

    (x⁴ + x² + x + 1) / (x³+1)

9. Explain the procedure of mix column transformation in AES with an example.

    b) Divide 5x²+4x+6 by 2x+1 over GF(7).

3. a) Find the result of the following operations.            

    (i) 2 mod 5     (ii) 33 mod 3     (iii) -13 mod 10     (iv) -23 mod 10     (v) -8 mod 7

            OR

What are the asymmetries between the modulo n addition and modulo n multiplication over Z_n? 

3.     a) Let’s go back to the first step of processing in each round of AES. How does one look up the 16x16 S-box table for the byte-by-byte substitution?                                             (5)

3.     a) Describe the ''mix columns'' transformation that constitutes the third step in each round of AES.                                                                                                                              (5)

4. a) Briefly describe about MixColumns and AddRoundKey stages in AES. How many bytes in a state are affected by ShiftRows round?                                                         

3.    a) What are the steps that go into the construction of the 16 × 16 S-box lookup table for AES algorithm?                                                                                                                 (5)

5.     a) What is the purpose of S-Boxes in DES? Prove that DES satisfies complementation property?                                                                                                                            (6) 

    b. Describe the "mix columns" transformation that constitutes the third step in each round of AES.

    b) Describe the method for generating Round Constant table in AES algorithm in Add Round Key phase. Assume the number of rounds is 10.                                                   

    b. List the modes of operation in cryptography? Describe the Fiestel cipher structure.

    b) Determine whether the integers 105 and 294 are relatively prime. Explain your answer using Euclidean algorithm.                                                                                                (4)

                a. What does Euler Totient function means? What will be the value of PHI (119)? 

2. State the Fermat's theorem with example. Given the prime number p=29 and the primitive root g=8, private key of sender with X=9  and random integer K=11, encrypt the message m=13 using Elgamal cryptosystem.

        c. AES is a block cipher. What sized blocks are used by AES?

            e. What do you mean by primitive root of a prime number p? Is 3 a primitive root of 7? 

4. Define discrete logarithm. Explain the procedure of sharing the secret key in Diffie Hellman.

        d. What does Euler Totient Theorem states? What is the value of Totient(15)? 

2. a. What is Fermat's Little theorem? What is the totient of a prime number? Give an example.

                OR

    Define primitive root of a prime number with a suitable example,

2. a) In a RSA system, a user has chosen the primes 5 and 19 to create a key pair. The public key is {e=5, n=?} and the private key is {d=?, n=?}. Decide the private key {d, n}. Show encryption and decryption process for the message “TOGA”                                           

        g. How do you define a prime number? When are two numbers A and B considered to be coprimes?

2.     a) In public key cryptosystem, each of the communicating parties, in general, should know the public keys of each other before attempting security encryptions. How this can be achieved? Write a Public Key Authority Protocol for Public-key distribution among any two users.                                                                                                                    [4] 

2.     a) Consider a Deffie-Hellman scheme with a common prime p = 11 and a primitive root g= 2.

i. Show that 2 is a primitive root of 11.

ii. If user A has public key Y_a = 9, what is A’s private key X_a?

iii. If user B has public key Y_b = 3, what is shared key K, shared with A.         (3x2=6) 

                            OR

How can a number can be tested for primality testing using Miller-Rabin algorithm? Explain.

10. what is the role of prime number in Euler totient function? Find the GCD of 12 and 16 using Euclidean algorithm.

    b. How can RSA can be used for generating public and private key? Explain.

    b) What do you mean by man-in middle attack? Is man-in-middle attack possible in Deffie-Hellman? How?                                                                                                      (5)

    b) How can Diffie-Hellman can be used for key exchange? Explain.                               

4.

    a) In a RSA system, a user named Messi has chosen the primes 5 and 11 to create a key pair. Now show the generation of public key pair (e_Messi, n) and private key pair (d_Messi, n). Show how Messi can encrypt the message "Soccer" using his own public key.

4. a) In a RSA system, a user has chosen the primes 5 and 19 to create a key pair. The public key is (5, n) and the private key is (d, n). Decide the private key (d, n). Show encryption and decryption process for the message “Drogba”.                                                           

       b) In RSA algorithm, what is necessary condition that must be satisfied by the modulus n chosen for the generation of the public and private key pair? Also, is the modulus made public?                                                                                                                                (5)

OR

4.     a) Miller-Rabin algorithm for primality testing is based on a special decomposition of odd  numbers. What is that? Explain                                                                                         (5) 

    b) Miller-Rabin test says that if a candidate integer n is prime, it must satisfy one of two special conditions. What are those two conditions?                                                          (5)

5.  a) How do you create public and private keys in the RSA algorithm for public-key cryptography?          (5)

OR

     b) In RSA algorithm, the necessary condition for the encryption key e is that it be coprime  to the totient of the modulus. But, in practice, what is e typically set to and why?            (5) 

5.     a) How do you create public and private keys in the RSA algorithm for public-key cryptography?                                                                                                                    (5)

                                                OR

      b) What is Fermat's Little Theorem? What is the totient of a number?                             (5) 

6. a) How Man-In-Middle attack is possible in Deffie-Hellman Algorithm. Support answer with a numerical computation. Chose the required parameters with your own assumptions.

6.

    a) Suppose there are two users Xavi and Persie who agreed to use Deffie-Hellman algorithm to exchange a key. Consider there is an eavesdropper Balotelli who attemps attack on the procedure. Show how Balotelli can perofrm Man-In-Middle attack in the Deffie-Hellman Key exchange protocol?

    b) What do you mean by Man-in-Middle attack? Is man in middle attack possible in Diffie-Hellman algorithm for key exchange? How?                                                         

5.     a) Miller-Rabin test for primality is based on the fact that there are only two numbers in Zp that when squared give us 1. What are those two numbers?                                       (5)

OR

        b) How can public-key cryptography be used for document authentication?                     (5)

OR

       What seems so counterintuitive about the counter mode (CTR) for using a block cipher?

What is discrete logarithm and when can we define it for a set of numbers?             (5) 

         b) What is the Diffie-Hellman algorithm for exchanging a secret session key?               (5) 

        a. How MAC differs from Hash? Is authentication and authorization refers to same term or different? Justify.

                b. What properties does a good hash function should have? 

        c. What is weak collision resistance property of hash function?

3. Compare the SHA parameters between SHA-1 and SHA-2 family. Decrypt the cipher text DRJI with key  using Hill cipher.

        c. Why Hash Functions are often known as one way functions?

        d. Mention the image resistive properties of Hash functions. 

        f. What do you mean by one-time signatures? 

        f. How Message Authentication Codes differ from Hash Functions? 

6. Define digital signature. Describe the approaches of DSS.

        g. What is a hash code? Why can a hash function not be used for encryption?

3.

    a) How padding is done in MD5? What enhancements in MD4 are done to get better hash function MD5?

3. a) How padding is done in SHA-1? How 160-bit of hash value is generated by taking an input message of variable size using SHA-1?                                   

    b) What basic arithmetic and logical functions are used in SHA-1?                                 

        b) Mention the details of logical operations used in MD4. How the Majority function in Pass 1 of MD4 works?                                                                                                       [6] 

      b) What is the difference between algorithmically generated random numbers and true random numbers?                                                                                                                   (5)

4.     a) How Hash functions differ from MAC? Given a message m, discuss what arithmetic and logical functions are used by MD4 to produce message digest of 128 bits.           (2+4) 

        b) What do you mean by arbitrated digital signature? How signatures are generated using Digital Signature System?       [6]

5. a. Does it possible to design collision free hash function? What does birthday attack refers to? Explain.

    b) What is the digital signature for, authentication of confidentiality? Justify your answer. What does security handshake pitfall refer to?                                                                  

5.

    a) What is the use of digital signature? Discuss the working mechanism of Digital Signature Algorithm.

5. a) Why hash functions are known to be best option for digital signature schemes? How about the use of encryption paradigms for generating digital signatures?                        

5.     a) What is meant by the strong collision resistance property of a hash function?               (5) 

6. a) Differentiate between direct digital signature and arbitrated digital signature. How signing and verifying process is done in Digital Signature Standard. 

6.     a) What do you mean by digital signature? How digital signatures can be enforced using encryptions? Illustrate with an example.                                                                       (1+5)

6. a) Is hash and MAC resemble the same meaning? Explain how SHA generates 160 bit digest value?                                                                                                                      

6.     a) How hash function differ from MAC? Discuss how data integrity can be achieved from either of them.             (5) 

6.     a) How hash function differ from MAC? Discuss how data integrity can be achieved from either of them.                                                                                                                    (5)

      b) What is the relationship between ''hash'' as in ''hash code'' or ''hashing function'' and ''hash'' as in a ''hash table''?                                                                                                (5)  

        b. What are the components of authentication system? Give an example of authentication system.

    b. Explain about the working mechanism of Kerberos.

5. a) In which situation using Kerberos system seem to be good? Describe what the major components of Kerberos system are.                                                                             

    b) What do you mean by password aging? How online dictionary attacks differ from offline attacks?

    b) Define authentication system. How hardware based challenge response systems can be used as authentication approach.                                                                                       

               e. Differentiate session keys from interchange keys. 

        f. Define PKI Trust Model.

        f. List the five services that PGP operation is based on.

            f. Describe the concept behind public key infrastructure. 

        f. What do you mean when we say that a pseudorandom number generator is cryptographically secure?

        g. How security at application layer can be achieved? 

7. What is the task of firewall? List the elements of X.509.

3. a) Differentiate between SSL Session and SSL Connection. How SSL Record protocol provides confidentiality and message integrity.

        b) How Kerberos Version 4 differs from Kerberos Version 5? How once per type of service approach is ensured by Kerberos Protocol.                                                           [6] 

    b) Does Kerberos protocol ensures authentication and confidentiality in secure system? Explain.                                                                                                                              (5)

    b) What is the role of SSL Handshake Protocol in Secure Socket layer Protocol?

    b) List the participants of Secured Electronic Transaction (SET). Discuss the key features of SET.   

4.     a) There are two aspects to a secure communication link: authentication and confidentiality. How do you understand these two words? Does the Kerberos protocol give us both?                                                                                                                      (5) 

How is the sender authentication carried out in PGP?                                                (5) 

    b) Discuss the five principle services provided by PGP protocol.                                    (4)

    b) How SSL Record Protocol provides security in Secure Socket Layer Protocol?         

            OR

    What is the role of SSL Record Protocol in SSL/TLS? Explain.

4.     a) What sort of secure communication applications is the Kerberos protocol intended for? Explain.                                                                                                                              (5) 

5. a) Explain about PGP.                                                                                                 OR

What are the notions Public Key Ring and Private Key Ring in PGP? 

    What are the notions Public Key Ring and Private Key Ring in PGP?

6. a. Define digital signature. How certificates are issued in PKI trust models? Explain.

        b) What is the difference between a connection and a session in SSL/TLS? Can a session include multiple connections? Explain the notions “connection state” and “session sate” in SSL/TLS. What security features apply to each?                                                               (5) 

b) What is the difference between a connection and a session in SSL/TLS? Can a session include multiple connections? Explain the notions “connection state” and “session sate” in SSL/TLS. What security features apply to each?                                                          (5)

6.     a) What is the role of the SSL Record Protocol in SSL/TLS? Explain.                              (5)

OR

    b) What does PGP stand for? What is it used primarily for? And what are the five services provided by the PGP protocol? 

        b) What is a certificate and why are certificates needed in public key cryptography?     (5) 

    b) What is a certificate and why are certificates needed in public key cryptography? (5) 

6.     a) We say that SSL/TLS is not really a single protocol, but a stack of protocols. Explain. What are the different protocols in the SSL/TLS stack?                                                   (5) 

        a. What are the typical phases of operation of virus?

        b. Differentiate between virus and worms.

        b. Differentiate between virus and Trojan horse.

        b. How zombies differ from logic bombs? 

        e. How rabbits and bacterium can be malicious to a secure system? 

        e. How afraid should you be of viruses and worms?

            g. What are the possible phases that a virus can go through, during its life cycle? 

        f. What is the difference between a virus and a worm?

8. How does the nature of worms differ with virus? Define PKI with its architecture model.

3.     a) How Trojan horse differs from viruses? Discuss about possible types of Trojan horses.                                                                                                                                    (2+3)

12. Write short notes on (Any Two)

        a. Classes of intruder

        b. SSL

        c. Dos Attack