Study. uk . com
  1. Home
  2. All questions
  3. Question 244

CISSP study material · question 244 of 500

An engineer must decide which key usage bit to set for an RSA public key that will encrypt a symmetric content-decryption key. Which bit applies, and what does the neighbouring bit mean?

  1. keyEncipherment, which covers key transport; dataEncipherment covers encrypting raw user data directly and is rare.
  2. dataEncipherment, which covers wrapping keys; keyEncipherment covers key agreement.
  3. keyAgreement, since a symmetric key is being established.
  4. digitalSignature, since the wrapped key authenticates the sender.
Show the answer

Answer: A. keyEncipherment, which covers key transport; dataEncipherment covers encrypting raw user data directly and is rare.

The keyEncipherment bit is asserted for key transport, such as an RSA key encrypting a symmetric content-decryption key. dataEncipherment covers direct encryption of user data and is very uncommon.

Source: RFC 5280 (IETF) — RFC 5280 > 4.2.1.3 Key Usage

Challenge yourself on this topic → Study as cards