Cryptographic Solutions and Cryptanalytic Attacks

Introduction

This lesson covers tasks 3.6 and 3.7 of Domain 3, Security Architecture and Engineering (13% of the exam, ISC2 exam outline effective 15 April 2024): select and determine cryptographic solutions, and understand methods of cryptanalytic attacks. Cryptography is the toolkit behind confidentiality, integrity, authentication, and nonrepudiation. The CISSP does not ask you to do mathematics; it asks you to choose the right primitive for a requirement, to manage keys across their lifecycle, and to recognize an attack from its description.