Study. uk . com
  1. Home
  2. All questions
  3. Question 234

CISSP study material · question 234 of 500

A board asks what bounding a key's cryptoperiod actually buys. Which three purposes does NIST SP 800-57 give? Choose three.

  1. It limits how much is exposed if that single key is compromised.
  2. It limits the time available for computationally intensive cryptanalysis.
  3. It removes the need for key revocation procedures.
  4. It limits the volume of material available for cryptanalysis under one key.
Show the answer

Answer: B. It limits the time available for computationally intensive cryptanalysis.
D. It limits the volume of material available for cryptanalysis under one key.
A. It limits how much is exposed if that single key is compromised.

A bounded cryptoperiod limits material available for analysis, exposure from one compromise, the algorithm's period of use, and the time attackers have against key protections.

Source: NIST SP 800-57 Part 1 Rev. 5 (NIST) — SP 800-57 Part 1 Rev. 5 > 5.3 Cryptoperiods

Challenge yourself on this topic → Study as cards