PrepAway - Latest Free Exam Questions & Answers

Which key agreement scheme uses implicit signatures?

Which key agreement scheme uses implicit signatures?

PrepAway - Latest Free Exam Questions & Answers

A.
MQV

B.
DH

C.
ECC

D.
RSA

Explanation:
MQV (Menezes-Qu-Vanstone) is an authentication key agreement cryptography function very similar to DiffieHellman. The users’ public keys are exchanged to create session keys. It provides protection from an attacker
figuring out the session key because she would need to have both users’ private keys.
The MQV elliptic curve key agreement method is used to establish a shared secret between parties who
already possess trusted copies of each other’s static public keys. Both parties still generate dynamic public and
private keys and then exchange public keys. However, upon receipt of the other party’s public key, each party
calculates a quantity called an implicit signature using its own private key and the other party’s public key. The
shared secret is then generated from the implicit signature. The term implicit signature is used to indicate that
the shared secrets do not agree if the other party’s public key is not employed, thus giving implicit verification
that the public secret is generated by the public party. An attempt at interception will fail as the shared secrets
will not be the same shared secrets because the adversary’s private key is not linked to the trusted public key.
Incorrect Answers:
B: DH (Diffie-Hellman) does not use implicit signatures.
C: ECC (Elliptic Curve Cryptosystem) does not use implicit signatures.
D: RSA does not use implicit signatures.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, p. 815
https://www.certicom.com/index.php/mqv


Leave a Reply