A bank wishes to record the account number of its clients (an 8-digit number) on magnetic stripe ATM cards in an encrypted format for the purpose of fraud prevention. Analyze on how secure the following methods of storing the account number are in the face of an adversary who is capable of reading the magnetic stripe: Encrypt the account number and store it as a cryptographic hash

A bank wishes to record the account number of its clients (an 8-digit number) on magnetic stripe ATM cards in an encrypted format for the purpose of fraud prevention. Analyze on how secure the following methods of storing the account number are in the face of an adversary who is capable of reading the magnetic stripe: Encrypt the account number and store it as a cryptographic hash

Management Of Information Security

6th Edition

ISBN:9781337405713

Author:WHITMAN, Michael.

Publisher:WHITMAN, Michael.

Chapter12: Protection Mechanisms

Section: Chapter Questions

Problem 18RQ

See similar textbooks

Similar questions

A government organization decides that in order to protect the communications it has with its international partners, encryption is necessary. In a discussion with its equivalents, it is decided to develop a proprietary cryptographic algorithm for the following reasons: Is this decision supported by any evidence. What dangers are being exposed?
A bank wishes to record the account number of its clients (an 8-digit number) on magnetic stripe ATM cards in an encrypted format for the purpose of fraud prevention. Analyze on how secure the following methods of storing the account number are in the face of an adversary who is capable of reading the magnetic stripe: Use a symmetric cryptosystem to save the ciphertext of the account number once it has been encrypted with the bank's secret key.
Data Encryptions and Cryptography Harry computes a hash value as a function of the bits in the message and transmits both the hash value and the message to Clint, Clint performs the same hash calculation on the received message bits and compares this value with the incoming hash value. If there is a mismatch, the receiver knows that the message (or possibly the hash value) has been altered. Analyze the given scenario in Figure and identify the security properties that can be achieved, Explain your answer
RSA Using python script: Attacker obtains Q(n) = 15000 and knows public key is (en) = (19,15251). He is able to calculate decryption private key (d,n) and use it to decrypt the following: ciphertext: 9794-3241-9862 Find plaintext: "
One type of cryptographic algorithm is a one-way hash algorithm. Explain it and its characteristics thoroughly.
In symmetric-key cryptography, if every person in a group of 10 people needs to communicate with every other person in the group, how many secret keys are needed?
Public-key cryptography, or another kind of asymmetric encryption, is strongly suggested. Proof of this may be seen in the use of public keys in cryptography.
When a combination of symmetric encryption and an error control code is used for message authentication, in what order must the two functions be performed in Cryptography?
Use the values below to decrypt the numerical ciphertext c = 9. Use the following cryptoscheme: Encryption (m + k) mod N = c Decryption (c - k) mod N = m N = 63 k = 26 Example:5
Explain how cryptographic mechanisms can be used to guarantee Confidentiality by encrypting M = 4 using the public key (e; n) = (3; 77) in the RSA cryptosystem.
A government department decides it needs to use encryption to protect communication between itself and its international counterparts. At a meeting with its counterparts, it is decided to develop a proprietary cryptographic algorithm for this purpose. Is this decision justifiable? What risks are being taken?
A bank wants to store the account number of its customers (an 8-digit number) in encrypted form on magnetic stripe ATM cards. Discuss the security of the following methods for storing the account number against an attacker who can read the magnetic stripe: (1) store a cryptographic hash of the account number; (2) store the ciphertext of the account number encrypted with the bank's public key using a public-key cryptosystem; (3) store the ciphertext of the account number encrypted with the bank's secret key using a symmetric cryptosystem.