Part 1: Short Answer. Answers should be no longer than a few sentences. "Bulletized" lists or small tables may be used for the sake of brevity. The point value of each question appears at the beginning of the question. Partial credit may be given if work is clearly shown.
1. A 1,024-bit message is used to generate a 24-bit hash. On the average, how many other messages could be expected to generate the same hash value? What is the probability that two massages that generate the same 24-bit hash?
2. Using the English alphabet (i.e., mod 26 arithmetic) let plaintext = {p1, p2,... , pn} and corresponding ciphertext = {c1, c2,... , cn}. Suppose the encryption function is ci = pi + 6 (mod 26). If you receive the ciphertext message ASAIMXGJAGZKYINUUR and are asked to recover the plaintext. answer the following questions: a). What is the decryption function, b). What is the decrypted plaintext? c). What are some weaknesses of this cipher?
3. You are Alice. You have agreed with your friend Bob that you will use the Diffie-Hellman public-key algorithm to exchange secret keys. You and Bob have agreed to use the public base g = 19 and public modulus p = 739. You have secretly picked the value SA = 5.You begin the session by sending Bob your calculated value of TA. Bob responds by sending you the value TB = 113. What is the value of your shared secret key?
4. Bob believes that he has come up with a nifty hash function. He assigns a numeric value VChar to each letter in the alphabet equal to the letter's position in the alphabet, i.e., VA = 1, VB = 2, ..., VZ = 26. For a message, he calculates the hash value H = (VChar 1 x VChar 2 x VChar 3 ...x VChar N) mod(26). Bob uses this function to send a one-word message, LAYER, to his banker Bill, along with his calculated hash value for the message. Alice is able to intercept the message, and generates an alternative message that has a hash value that collides with Bob's original hash value. Show a message that Alice may have spoofed, and demonstrate that its hash value collides with Bob's original hash.
5. Consider the following plaintext message: FAIN 460 9043 IS A GRADUATE COURSE.
a. If this message is sent unencrypted and successfully received, what is its entropy?
b. If this message is encrypted with DES using a random 56-bit key, what is the encrypted message's entropy?
6. A particular cipher is implemented by combining the ASCII representation of plaintext characters with pseudorandom bytes (eight-bit binary strings of 1s and 0s) using the XOR function. (i.e,, C = P XOR Key). This process can be expanded to double-XOR or even triple-XOR (i.e., C = P XOR K1 XOR K2). Assume that the two pseudorandom bytes are 10110101 (K1) and 01110010 (K2) and the double-XOR is used,.
a. What is the ciphertext (in binary form) generated by the encryption of the character T (Please show your work.)
b. What is the plaintext for the ciphertext 10000001? (Please show your work.)
7. The following ciphertext is a monoalphabetic ciper:
PELCGBTENCUL VF GUR NEG BS FRPERG JEVGVAT VG VAIBYIRF GENAFSBEZVAT VASBEZNGVBA VAGB NCCNERAGYL HAVAGRYYVTVOYR TNEONTR FB GUNG HAJNAGRQ RLRF JVYY OR HANOYR GB PBZCERURAQ VG
Decrypt this message, and briefly describe your cryptanalysis methodology. In particular, list features of the ciphertext that hindered or helped your decryption process.
8. An organization has 100 members. It is desired that each member of the organization be able to communicate securely with any other member, without any other member being able to decrypt their messages. Explain the details of each question below:
a. What is the total number of keys that are required for the organization if symmetric cipher is used? Why?
b. What is the number of keys need to be kept by each member are required for if symmetric cipher is used? Why?
c. What is the total number of public key(s) and private key(s) are required for the organization if asymmetric cipher is used? Why?
d. How many public key(s) and private key(s) need to be kept by each member if the asymmetric cipher is used? Why?
9. Acme Inc. is developing the next generation financial tracking program, and Alice has been given the task of writing the encryption component, which will encrypt each user's data in a file on the hard drive. Alice has decided to use RSA as her encryption algorithm. As the cryptographic consultant for the project, do you think this is a good choice or not? You should state the reasons for your answer, and suggest an alternative if you do not think she made a good choice.
10. Briefly compare and contrast how asymmetric cryptography is used to provide encryption as opposed to how it can be used to provide a digital signature.
11. What is the purpose of the Diffie-Hellman algorithm? What are its major strength(s) and weakness(es)?
12. Using RSA, let p = 17, q = 13 and e = 5. What is the complete private key?
13. Encrypt-It-Rite, a vendor of encryption software, sells a symmetric cipher that uses a 56-bit key. The company decides to conduct a "challenge" to crack an encrypted message using a brute-force approach. The average time to crack the message is found to be 1 hrs. As a result, Encrypt-It-Rite decides to increase the key length by 8 bits, from 64 to 72 bits. They then conduct another challenge. What average cracking time would be expected for the new, improved cipher? If Encrypt-It-Rite would like to increase the average cracking time to at least 100 years, what will be the minimal length of the key?
14. A foreign navy has implemented a secure communications system in which submarine commanders transmit a single 5-letter message every day. The messages may only use capital (English) letters, and all messages are equally probable. A crypto device encrypts each message into 20 bits of ciphertext.
a. What is the entropy of the plaintext message?
b. What is the entropy of the ciphertext message?
c. Is this a good cryptosystem? Why or why not?
15. Bob is concerned about the possibility of having his 100k byte file modified without his knowledge, so he calculates a 100 byte hash. Alice, unbeknownst to Bob, changes a single character in Bob's file. Assuming that Bob used a strong hash function, what would the hash value of the modified file look like, as compared with the original hash value? Verify your answer.
16. Suppose that Alice and Bob need to communicate, and have decided to use asymmetric (public key) encryption.
a. Using only asymmetric encryption algorithms, describe a process that would allow Alice to send a message that can only be read by Bob. You should also include any steps taken by Bob that allow him to read the message.
b. Using only asymmetric encryption algorithms, describe a process that would allow Alice to send a message that Bob could be confident was sent by Alice. You should also include any steps taken by Bob to determine whether or not Alice actually sent the message.
c. Using only asymmetric encryption algorithms, describe a process that would allow Alice to send a message that can only be read by Bob, and that Bob could be confident was sent by Alice. You should include any steps taken by Bob to read the message, or to determine whether Alice actually sent the message.
17. Suppose that Eve runs a key server. Alice downloads a key from the key server which Eve claims is Bob's public key. Bob downloads a key from the key server which Eve claims is Alice's public key.
a. Given that Alice and Bob both assume that they have the correct public keys for the other party, and assuming that Eve can intercept any messages passed between Alice and Bob, is there any way that Eve can read the encrypted communications between the two parties? If so, how could she do it, and would Bob or Alice know that Eve was reading their messages?
b. What steps could Alice take to ensure that the public key which Eve claims belongs to Bob is actually correct?
Part 2: Essay Question. Maximum length: three (3) pages (double spaced). Use APA format for in-line citations and references.
Compare and contrast symmetric and asymmetric encryption algorithms. Your response should include a brief overview of the cryptographic basis for each type of algorithm, and a comparison of their relative strengths and vulnerabilities. Describe how a hacker might go about cracking a message encrypted with each type of algorithm. Suggest a specific application for each type of algorithm where the advantages clearly outweigh the disadvantages.