Security+ Certification/Cryptography

Cryptography

Summarize general cryptography concepts

Symmetric vs. asymmetric
Fundamental differences and encryption methods
Block vs. stream

Transport encryption
Non-repudiation
Hashing
Key escrow
Steganography
Digital signatures
Use of proven technologies
Elliptic curve and quantum cryptography

Use and apply appropriate cryptographic tools and products

• WEP vs. WPA/WPA2 and preshared key
• MD5
• SHA
• RIPEMD
• AES
• DES
• 3DES
• HMAC
• RSA
• RC4
• One-time-pads
• CHAP
• PAP
• NTLM
• NTLMv2
• Blowfish
• PGP/GPG
• Whole disk encryption
• TwoFish
• Comparative strengths of algorithms
• Use of algorithms with transport encryption
  • SSL
  • TLS
  • IPSec
  • SSH
  • HTTPS

Explain the core concepts of public key infrastructure

• Certificate authorities and digital certificates
  • CA
  • CRLs
• PKI
• Recovery agent
• Public key
• Private key
• Registration
• Key escrow
• Trust models

Implement PKI, certificate management and associated components

• Certificate authorities and digital certificates
  • CA
  • CRLs
• PKI
• Recovery agent
• Public key
• Private key
• Registration
• Key escrow
• Trust models