Certified Information Systems Auditor CISA · Free Practice Question Medium
Question 75
Which of the following actions is MOST likely to compromise the control provided by a digital signature created using RSA encryption?
- A A. Intercepting the digital signature during transmission.
- B B. Manipulating the encrypted message after it has been signed.
- C C. Compromising the recipient's public key.
- D D. Compromising the sender's private key.
Reveal correct answer
Correct answer: D
Explanation
Correct Answer: D. Compromising the sender's private key. Explanation: In RSA encryption, a digital signature is created by using the sender's private key to encrypt a hash value of the message. This digital signature can be verified using the corresponding public key. The security of the digital signature relies on the confidentiality and integrity of the private key. If an attacker compromises the sender's private key (Option D), they can generate fraudulent digital signatures for any message, making it appear as if it was sent by the legitimate sender. This compromises the control provided by the digital signature and undermines its authenticity and non-repudiation properties. Intercepting the digital signature during transmission (Option A) or manipulating the encrypted message (Option B) does not compromise the control provided by the digital signature itself. These actions may affect the confidentiality or integrity of the message but do not directly compromise the digital signature mechanism. Compromising the recipient's public key (Option C) may impact the recipient's ability to verify the digital signature, but it does not compromise the control provided by the digital signature created using the sender's private key. Therefore, the action that is MOST likely to compromise the control provided by a digital signature created using RSA encryption is compromising the sender's private key.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
