Please enable JavaScript.

Coggle requires JavaScript to display documents.

Domain 3, How to Remember? # #, False Positives by dust and contaminant #…

- - - - Making the relationship between key and ciphertext as complex as possible
  - - - Blocks are scrambled within the block
- - - - Goal is to discover the key used to decrypt all the messages
  - - - Uses those puzzle pieces to try and reverse engineer the key.
  - - - Allows the attacker more power and a deeper understanding of the encryption process.
  - - - Likely requires control of the system that contains the cryptosystem.
  - - - Considered a type of chosen-ciphertext attack.
  - - - Evaluates the input and output values for each S-box and evaluates the probability of input values ending up in a specific combination.
- - - - Failing Securely
        
        Display friendly error messages without revealing internal system details
      - Web application firewalls
      - Encryption
      - Input validation
  - - - Centrally managed with remote policies and profiles
      - Data encryption, idle timeout, remote wipe
      - Bluetooth, camera, and web restrictions
      - AV
  - - - Designed to control electromechanical processes (assembly lines, elevators, etc.)
    - - System that controls PLCs and microcontrollers in close proximity to one another.
    - - Meant to control similar systems as a DCS but over greater distances
      - Remote Terminal Unit (RTU)
        
        Endpoint directly connected to sensors and/or actuators
        
        Commonly replaced by PLCs
      - Data Acquisition Servers
        
        Receive data from endpoints through a telemetry system and perform analysis/correlation
      - Human Machine Interface (HMI)
- - - - Sometimes referred to as DEA
        
        effective key length of 56 bits
        
        8 bits of parity & 56 bits for key = 64 total bits
      - MODES
        
        Electronic Code Book (ECB)
        
        Fastest mode
        
        Use only for short messages
        
        Errors are contained to a single block
        
        Cipher Block Chaining (CBC)
        
        Utilizes value based on previous block to encrypt next block
        
        First block uses Initialization Vector
        
        Great for large chunks of data
        
        Cipher Feedback Mode (CFB)
        
        Combo of block and stream cipher
        
        First block uses IV
        
        Each new block should use unique IV
        
        Counter (CTR)
        
        IV Counter that increments for each plaintext block that needs to be encrypted
        
        Can encrypt in parallel (better performance)
        
        Output Feedback (OFB)
        
        Not susceptible to errors like CBC & CFB
        
        Used for smaller amounts of data
    - - 48 rounds of computation
      - Heavy performance hit
    - - 64-bit blocks
      - 23-448-bit Keys
    - - 64-bit blocks
      - 128-bit key
    - - 128, 192, & 256 block sizes
- - - - Used for digital signatures, key exchange, and encryption
      - Replay attacks are not used to break RSA
    - - digital signatures, secure key distribution, and encryption
      - More efficient than any other asymmetric algorithm
- - - - Stream of bits XORed with the plaintext to produce ciphertext
- - - - Temporary storage location
      - Holds the info that tells CPU what the next job is
      - General Registers
        
        Hold variables and temp results for the ALU
      - Special Registers
        
        Hold program counter, stack pointer, and program status word
        
        Program Counter Register
        
        Contains memory address of next instruction to be fetched
        
        Program Status Word
        
        Holds condition bits. Determines whether CPU should be in user mode or privileged mode
    - - Execution of the instructions
      - Performs mathematical functions and logical operations on data
    - - Manages and syncs the system while application code and OS instructions are being executed
      - Like a traffic cop for for instructions
  - - - Decode
        
        Execute
        
        Write
- - - - 1.) Simple Security Rule
        2.) *-property rule
        3.) Strong Star Property rule
        
        *-property rule
        
        Cannot write lower than your own security level
        
        Strong Star Property Rule
        
        If you have read/write at a certain security level, you cannot read/write at a lower or higher level.
        
        Simple Security Rule
        
        Cannot read higher than your own security level
  - - - 1.) *-integrity axiom
        2.) Simple Integrity axiom
        3.) Invocation property
        
        Simple Integrity Axiom
        
        Cannot read data from a lower integrity level
        
        Invocation Property
        
        Cannot request service at a higher integrity
        
        *-integrity axiom
        
        Cannot write data to an object at a higher level
  - - - work with
        
        Constrained Data Items (CDIs)
        
        Checked by and worked with
        
        Transformation Procedures (TPs) and Integrity Verification Procedures (IVPs)
        
        so that users can't mess with
        
        Unconstrained data items (UDIs)
- - - - If charge is interrupted, alarm triggers
- - - - Both come up with the same symmetric key which can now be used for encryption
        
        This is known as key agreement (not key exchange)
- - - - Utilizing decryption tool to discover the key
        
        Can be mitigated by adding random padding in the plaintext
- - - - 3.) Client verifies cert and extracts public key. Uses public key to encrypt a new "pre-master key" and sends to server
        
        4.) Server uses private key to decrypt pre-master key
        
        5.) Client sends message encrypted with shared secret
        
        6.) Server decrypts and verifies message and confirms with client that it worked