Study. uk . com
  1. Home
  2. All questions
  3. Question 165

CISSP study material · question 165 of 500

An architect is checking whether a storage product's cryptographic erase can be relied on. Which two conditions does NIST SP 800-88 Rev. 2 set? Choose two.

  1. The encryption must be symmetric with a security strength of at least 128 bits.
  2. The random source must supply entropy at least as long as the keys involved.
  3. The data encryption key must be escrowed before the erase is performed.
  4. The device must additionally be degaussed after the keys are destroyed.
Show the answer

Answer: A. The encryption must be symmetric with a security strength of at least 128 bits.
B. The random source must supply entropy at least as long as the keys involved.

Cryptographic erase rests on symmetric encryption at a security strength of at least 128 bits, with random sources providing entropy at least equal to the length of the keys.

Source: NIST SP 800-88 Rev. 2 (NIST) — SP 800-88 Rev. 2 > 3.2.1 Strength of Cryptography for CE

Challenge yourself on this topic → Study as cards