Tags: #◇Computer Science #◇NSSECU1 #◇Cybersecurity #◇Cryptography #◇Reviewer #◇Finals
NSSECU1 Comprehensive Finals Reviewer
◇Overview
This reviewer consolidates Network Security 1 (NSSECU1). Core disciplines cover information security fundamentals (CIA Triad: Confidentiality, Integrity, Availability), threat modeling, classical ciphers, symmetric cryptography (DES, 3DES, AES), block cipher modes of operation (ECB, CBC, CTR, GCM), asymmetric cryptography (RSA, Diffie-Hellman Key Exchange, Elliptic Curve Cryptography), cryptographic hash functions (SHA-256, HMAC), Public Key Infrastructure (PKI, X.509 certificates, CA hierarchy), network authentication protocols (Kerberos), defensive firewalls, and vulnerability scanning fundamentals.
◇1. Cryptography Primitives Master Matrix
| Primitive Category | Core Algorithms | Key Size / Output | Security Goal | Typical Application |
|---|---|---|---|---|
| Symmetric Encryption | AES (Rijndael), 3DES, ChaCha20 | 128, 192, 256 bits | Confidentiality (Bulk data) | TLS session encryption, BitLocker, IPsec |
| Asymmetric Encryption | RSA, ECC (ECDSA, Ed25519) | RSA: 2048–4096 bits ECC: 256 bits | Key Exchange, Digital Signatures | TLS handshake, SSH keys, PGP |
| Cryptographic Hash | SHA-256, SHA-3, BLAKE2 | 256, 512 bits | Integrity (One-way property) | File verification, Password storage, Blockchain |
| Message Authentication | HMAC-SHA256, Poly1305 | Keyed MAC tag | Integrity + Authenticity | API request signing, TLS record integrity |
| Key Agreement | Diffie-Hellman (ECDH) | Curve25519 (256-bit) | Forward Secrecy key agreement | Ephemeral session key derivation |
◇2. Hybrid Cryptosystem Workflow
◇3. High-Yield Exam Checklist
- Does ECB mode provide security for pattern-rich data? NO! Electronic Codebook encrypts identical plaintext blocks into identical ciphertext blocks (the ECB Tux vulnerability).
- What is Forward Secrecy (PFS)? Compromise of the server's long-term private key does NOT compromise past recorded session keys (achieved via Ephemeral Diffie-Hellman: DHE/ECDHE).
- In a Digital Signature, which key signs the hash? The sender's private key signs; anyone with the sender's public key verifies.
- What are the 3 properties of cryptographic hashes? Pre-image resistance (one-way), Second pre-image resistance, and Collision resistance.
- In Kerberos authentication, what ticket is used to request service tickets? The Ticket Granting Ticket (TGT) issued by the AS.
◇References & Navigation
- Previous Topic: ◇CSNETWK
- Next Topic: ◇NSSECU2
- Prerequisites: ◇Network Security, Cryptography, AES, RSA, PKI, Firewalls
- Cross-Curricular Connections: ◇NSCOM02
ACTIVE RECALL VERIFICATION
Select an answer to verify conceptual comprehension and reveal the technical rationale.
Which block cipher mode of operation is vulnerable to visual pattern leakage because identical plaintext blocks encrypt to identical ciphertext blocks?
In asymmetric public-key cryptography, how does Alice digitally sign a message sent to Bob to prove authenticity and non-repudiation?
The Diffie-Hellman key exchange protocol allows two parties to establish a shared secret over an insecure channel, but is vulnerable to which attack if unauthenticated?
What is the primary purpose of a Salt when hashing user passwords?
What authentication ticket does a client present to the Ticket Granting Server (TGS) in a Kerberos environment to obtain a service ticket?