- Home
- All questions
- Question 244
CISSP study material · question 244 of 500
An engineer must decide which key usage bit to set for an RSA public key that will encrypt a symmetric content-decryption key. Which bit applies, and what does the neighbouring bit mean?
Show the answer
Answer: A. keyEncipherment, which covers key transport; dataEncipherment covers encrypting raw user data directly and is rare.
The keyEncipherment bit is asserted for key transport, such as an RSA key encrypting a symmetric content-decryption key. dataEncipherment covers direct encryption of user data and is very uncommon.
Source: RFC 5280 (IETF) — RFC 5280 > 4.2.1.3 Key Usage