developmentor - a developer services company				  
				      Essential .NET Security
   Modules

Conventional Cryptography and Kerberos


1. Conventional encryption is a great way to get rid of secrets
True! It's great for hiding connection strings and other secrets
False! It only creates more secrets!

2. The initialization vector for a block cipher is used to:
randomize the internal state of the one way logarithmic rooted hash functor
initialize the feedback loop when operating a cipher in a mode such as CBC (cipher block chaining)
introduce an additional secret that the attacker must know in order to break the cipher
all of the above

3. In Kerberos, the client must know who the server is running as,
in order to establish a TCP connection to the server
because Kerberos mandates mutual authentication
because the authority needs to generate a ticket that the server knows how to decrypt
all of the above

4. Established authentication protocols like Kerberos help us...
discover the identity of our peers on the network
exchange a session key with a network peer to protect subsequent communication
avoid having to develop key exchange protocols ourselves, because it's really hard to get right
all of the abvove

5. Passwords should be used to derive symmetric keys...
only with a good password policy in place to prevent weak passwords from being used
only using a secure hash algorithm