Cryptographic Implementation Best Practices

1. Which hash algorithm is considered cryptographically broken and should not be used for security-critical applications?

SHA-256

SHA-3

MD5

BLAKE2

2. Which cryptographic technique is most suitable for proving ownership of a message without revealing the message itself?

Symmetric encryption

Hashing with a digital signature

Substitution cipher

Compression

3. What vulnerability can arise from using the same nonce twice in stream cipher encryption?

Increased CPU usage

Ciphertext expansion

The keystream is identical, allowing attackers to recover plaintext via XOR analysis

Slower decryption

4. In TLS/SSL implementations, why is certificate pinning recommended?

To reduce connection latency

To prevent man-in-the-middle attacks by validating specific certificates rather than relying solely on the CA chain

To eliminate the need for encryption

To speed up certificate verification

5. What is the primary purpose of using a message authentication code (MAC) in cryptographic protocols?

To encrypt the message

To verify the integrity and authenticity of a message

To reduce message size

To hide the message recipient

6. Which of the following is a best practice for storing sensitive cryptographic keys?

Store them in plaintext in the application configuration

Use a dedicated key management system (KMS) or hardware security module (HSM)

Embed them in compiled binaries

Store them in a standard database with basic encryption

7. In cryptographic implementations, what does constant-time execution protect against?

Network eavesdropping

Timing side-channel attacks that leak information based on execution duration

Brute-force attacks

Rainbow table attacks

8. What is the primary security risk of using a static encryption key for all communications?

It slows down encryption

Compromise of a single key exposes all encrypted data

It prevents the use of modern algorithms

It requires more storage space

9. In secure communication, what does perfect forward secrecy (PFS) ensure?

All messages are encrypted with the same key

Session keys are derived such that compromise of long-term keys does not expose past session keys

The server's identity is always hidden

Messages cannot be transmitted over insecure channels

10. What is the primary advantage of using elliptic curve cryptography (ECC) over RSA?

It is always faster

It provides equivalent security with significantly smaller key sizes

It does not require key management

It is resistant to quantum computing

11. Which of the following is the primary reason to use authenticated encryption (AEAD) instead of encryption alone?

To reduce computational overhead

To ensure both confidentiality and integrity in a single operation

To eliminate the need for key management

To improve backward compatibility

12. In password-based encryption, what does the iteration count in PBKDF2 accomplish?

It reduces memory usage

It increases resistance to brute-force attacks by making key derivation computationally expensive

It eliminates the need for a salt

It improves encryption speed

13. Why should cryptographic random number generators (CSPRNGs) be used instead of standard pseudorandom generators?

They are faster

They are more predictable

They produce cryptographically secure, unpredictable values resistant to statistical analysis

They require less memory

14. What is a key rotation policy primarily designed to mitigate?

Increased network latency

The impact of long-term key compromise

Reduced encryption speed

Incompatibility with older systems

15. Which of the following best describes the purpose of an initialization vector (IV) in block cipher modes?

To encrypt the cipher key

To ensure each encryption with the same key produces different ciphertexts

To verify the authenticity of the message

To reduce the computational cost of encryption

16. In the context of RSA encryption, what is the recommended minimum key size for long-term security?

512 bits

1024 bits

2048 bits or larger

256 bits

17. What is the primary risk of hardcoding cryptographic keys in source code?

It reduces application performance

Keys are exposed if the code repository is compromised or leaked

It prevents the use of modern encryption algorithms

It limits the number of users who can access the system

18. Which cryptographic primitive is most appropriate for creating a digital signature?

Symmetric encryption

Asymmetric encryption with a private key

Hash functions alone

Stream ciphers

19. In key derivation functions, what does a salt accomplish?

Increases the speed of key generation

Prevents rainbow table attacks by ensuring unique outputs for the same input

Reduces the size of derived keys

Eliminates the need for a master password

20. What is the critical vulnerability associated with using ECB (Electronic Codebook) mode in block cipher encryption?

It requires more memory than other modes

Identical plaintext blocks produce identical ciphertext blocks, leaking patterns

It cannot encrypt large files

It is slower than CBC mode

SecurityX Cryptographic Implementation Best Practices Quiz