1What are the possible coefficient values of polynomials in ?
GF(2^n) Fields
Easy
A.Only and
B.All integers from to
C.Only and
D.All real numbers between and
Correct Answer: Only and
Explanation:
Elements of are represented using polynomials whose coefficients belong to , so each coefficient is either or .
Incorrect! Try again.
2Which operation is equivalent to polynomial addition in ?
GF(2^n) Fields
Easy
A.Integer division
B.Ordinary decimal addition followed by division by
C.Bitwise AND
D.Bitwise XOR
Correct Answer: Bitwise XOR
Explanation:
Polynomial coefficients are added modulo , which is equivalent to applying bitwise XOR.
Incorrect! Try again.
3How many elements are present in the finite field ?
GF(2^n) Fields
Easy
A.
B.
C.
D.
Correct Answer:
Explanation:
A field contains elements. Therefore, contains elements.
Incorrect! Try again.
4What is the block size used by DES?
DES Structure
Easy
A. bits divided into four independently encrypted sections
B. bits
C. bits
D. bits
Correct Answer: bits
Explanation:
DES encrypts plaintext in fixed-size blocks of bits.
Incorrect! Try again.
5How many rounds are performed in standard DES encryption?
DES Structure
Easy
A. rounds
B. rounds
C. rounds
D. rounds
Correct Answer: rounds
Explanation:
DES uses a Feistel structure consisting of encryption rounds.
Incorrect! Try again.
6What type of structure is used by DES?
DES Structure
Easy
A.Stream structure
B.Feistel structure
C.Sponge structure
D.Substitution-permutation structure with no division into left and right halves
Correct Answer: Feistel structure
Explanation:
DES is based on a Feistel structure, where each block is divided into left and right halves.
Incorrect! Try again.
7What is the main purpose of the S-boxes in DES?
DES Structure
Easy
A.Store the plaintext
B.Generate parity bits
C.Increase the block size
D.Provide substitution
Correct Answer: Provide substitution
Explanation:
DES S-boxes perform nonlinear substitution, converting each -bit input into a -bit output.
Incorrect! Try again.
8What is the effective key length of DES?
Analysis and Security of DES
Easy
A. bits
B. bits
C. bits
D. bits
Correct Answer: bits
Explanation:
Although a DES key is represented using bits, are parity bits, leaving an effective key length of bits.
Incorrect! Try again.
9Why is DES considered insecure for many modern applications?
Analysis and Security of DES
Easy
A.It requires a separate public key for every encrypted message
B.Its blocks are too large
C.It has no substitution operations
D.Its key is too short
Correct Answer: Its key is too short
Explanation:
The -bit DES key is small enough for modern computers to search using brute-force attacks.
Incorrect! Try again.
10Which cipher was introduced to improve security by applying DES multiple times?
Analysis and Security of DES
Easy
A.Triple DES
B.Double AES
C.Single RC4
D.Extended SHA
Correct Answer: Triple DES
Explanation:
Triple DES, also called 3DES, applies the DES operation three times to provide greater resistance to brute-force attacks.
Incorrect! Try again.
11What fixed block size does AES use?
AES Introduction
Easy
A. bits
B. bits
C. bits
D. bits
Correct Answer: bits
Explanation:
AES always processes data in -bit blocks, regardless of the selected key size.
Incorrect! Try again.
12Which key sizes are supported by AES?
AES Introduction
Easy
A., , and bits
B., , and bits with a separate parity bit for each byte
C., , and bits
D., , and bits
Correct Answer: , , and bits
Explanation:
AES supports three key sizes: , , and bits.
Incorrect! Try again.
13How many rounds does AES-128 perform?
AES Introduction
Easy
A. rounds
B. rounds
C. rounds
D. rounds
Correct Answer: rounds
Explanation:
AES-128 performs rounds. AES-192 and AES-256 perform and rounds, respectively.
Incorrect! Try again.
14Which AES transformation replaces each byte using an S-box?
AES Transformations
Easy
A.SubBytes
B.MixColumns
C.ShiftRows
D.AddRoundKey
Correct Answer: SubBytes
Explanation:
SubBytes replaces every byte in the AES state with another byte selected from a fixed S-box.
Incorrect! Try again.
15Which AES transformation cyclically shifts bytes within the rows of the state?
AES Transformations
Easy
A.A transformation that reverses every bit in each column before exchanging the columns
B.ShiftRows
C.MixColumns
D.SubBytes
Correct Answer: ShiftRows
Explanation:
ShiftRows cyclically moves bytes in each row by a specified number of positions.
Incorrect! Try again.
16Which AES transformation combines each state column using arithmetic in ?
AES Transformations
Easy
A.AddRoundKey
B.ShiftRows
C.SubBytes
D.MixColumns
Correct Answer: MixColumns
Explanation:
MixColumns transforms each column through matrix multiplication over .
Incorrect! Try again.
17What operation is used by AddRoundKey to combine the state with a round key?
AES Transformations
Easy
A.Integer addition
B.Bitwise XOR
C.Matrix transposition followed by decimal multiplication
D.Bitwise OR
Correct Answer: Bitwise XOR
Explanation:
AddRoundKey combines each byte of the AES state with the corresponding round-key byte using XOR.
Incorrect! Try again.
18What is produced by the AES key expansion process?
AES Key Expansion and Ciphers
Easy
A.Digital signatures
B.Initialization vectors
C.Plaintext blocks
D.Round keys
Correct Answer: Round keys
Explanation:
AES key expansion derives a separate round key for each encryption round from the original cipher key.
Incorrect! Try again.
19Which AES transformation is omitted from the final encryption round?
AES Key Expansion and Ciphers
Easy
A.AddRoundKey
B.MixColumns
C.SubBytes
D.ShiftRows
Correct Answer: MixColumns
Explanation:
The final AES encryption round includes SubBytes, ShiftRows, and AddRoundKey, but it does not include MixColumns.
Incorrect! Try again.
20Which block cipher mode can provide both encryption and authentication?
Use of modern block ciphers
Easy
A.GCM
B.CTR
C.CBC
D.ECB
Correct Answer: GCM
Explanation:
Galois/Counter Mode (GCM) provides confidentiality through encryption and integrity through an authentication tag.
Incorrect! Try again.
21In defined by the irreducible polynomial , what is ?
GF(2^n) Fields
Medium
A.
B.
C.
D.
Correct Answer:
Explanation:
The product is . Since , reduction modulo gives .
Incorrect! Try again.
22In defined using , which polynomial is the multiplicative inverse of ?
GF(2^n) Fields
Medium
A.
B.
C.
D.
Correct Answer:
Explanation:
. Because modulo , the result becomes .
Incorrect! Try again.
23What is the sum of the field elements 0x57 and 0x83 in ?
GF(2^n) Fields
Medium
A.0xD5
B.0xDA
C.0xC4
D.0xD4
Correct Answer: 0xD4
Explanation:
Addition in is bitwise XOR, so 0x57 XOR 0x83 = 0xD4.
Incorrect! Try again.
24Why does the DES expansion permutation transform the 32-bit right half into 48 bits before the round function continues?
DES Structure
Medium
A.To double selected bits so the next round receives a complete 64-bit block
B.To match the 48-bit round key and form eight 6-bit S-box inputs
C.To create six independent 8-bit values for the DES substitution stage
D.To append sixteen parity bits used to detect errors in the right half
Correct Answer: To match the 48-bit round key and form eight 6-bit S-box inputs
Explanation:
The expanded right half is XORed with a 48-bit round key and then divided into eight 6-bit inputs for the S-boxes.
Incorrect! Try again.
25In one DES Feistel round, suppose the input halves are and , and the round function produces . What are the output halves?
DES Structure
Medium
A. and
B. and
C. and
D. and
Correct Answer: and
Explanation:
A Feistel round copies the old right half to the new left half and XORs the old left half with the round-function output.
Incorrect! Try again.
26Which sequence correctly describes how a DES round key is derived from the supplied 64-bit key?
DES Structure
Medium
A.Discard parity bits, rotate two 28-bit halves, and select 48 bits
B.Substitute all key bytes, rotate one 56-bit value, and select 48 bits
C.Retain parity bits, rotate two 32-bit halves, and select 56 bits
D.Expand the key to 128 bits, divide it into halves, and select 64 bits
Correct Answer: Discard parity bits, rotate two 28-bit halves, and select 48 bits
Explanation:
PC-1 removes eight parity bits, the two 28-bit halves are rotated, and PC-2 selects 48 bits for each round key.
Incorrect! Try again.
27Assuming all DES keys are equally likely, approximately how many keys must an exhaustive-search attacker test on average before finding the correct key?
Analysis and Security of DES
Medium
A.
B.
C.
D.
Correct Answer:
Explanation:
DES has a 56-bit effective key, so there are possible keys. On average, half the key space— keys—is tested.
Incorrect! Try again.
28An analyst studies many plaintext pairs having carefully selected XOR differences and observes the resulting ciphertext differences. Which attack is being applied to DES?
Analysis and Security of DES
Medium
A.Differential cryptanalysis
B.Exhaustive key search
C.A meet-in-the-middle attack that stores every intermediate DES round value
D.Linear cryptanalysis
Correct Answer: Differential cryptanalysis
Explanation:
Differential cryptanalysis studies how selected input differences propagate through a cipher and influence output differences.
Incorrect! Try again.
29If DES encryption satisfies , what does the DES complementation property imply?
Analysis and Security of DES
Medium
A.
B.
C.
D.
Correct Answer:
Explanation:
Complementing both the DES key and plaintext produces the complement of the original ciphertext.
Incorrect! Try again.
30A system uses AES with a 192-bit key. How many encryption rounds are applied to each 128-bit block?
AES Introduction
Medium
A.16 rounds
B.10 rounds
C.12 rounds
D.14 rounds
Correct Answer: 12 rounds
Explanation:
AES uses 10 rounds for 128-bit keys, 12 rounds for 192-bit keys, and 14 rounds for 256-bit keys.
Incorrect! Try again.
31The bytes 00 01 02 ... 0F are loaded into an AES state in order. Which sequence forms the first row of the state?
AES Introduction
Medium
A.00 04 08 0C
B.00 03 06 09, because AES fills each row before proceeding to the next row
C.00 01 02 03
D.00 05 0A 0F
Correct Answer: 00 04 08 0C
Explanation:
AES loads input bytes column by column. Therefore, the first row contains bytes at positions 0, 4, 8, and 12.
Incorrect! Try again.
32During AES ShiftRows, a byte initially located in row 2, column 0 moves to which column?
AES Transformations
Medium
A.Column 1
B.Column 0
C.Column 2
D.Column 3
Correct Answer: Column 2
Explanation:
Row 2 is cyclically shifted two positions to the left, moving its original column-0 byte to column 2.
Incorrect! Try again.
33What is the result of applying AES MixColumns to the column ?
AES Transformations
Medium
A.
B.
C.
D.
Correct Answer:
Explanation:
Multiplying the input by the AES MixColumns matrix selects its first column, which is .
Incorrect! Try again.
34Which AES transformation is its own inverse when the same round key is used?
AES Transformations
Medium
A.AddRoundKey
B.SubBytes
C.ShiftRows
D.MixColumns
Correct Answer: AddRoundKey
Explanation:
AddRoundKey uses XOR. Since , applying it twice with the same key restores the state.
Incorrect! Try again.
35Which sequence of transformations is used in the final AES encryption round?
AES Transformations
Medium
A.SubBytes, ShiftRows, MixColumns, and then AddRoundKey using the original cipher key
B.SubBytes, ShiftRows, AddRoundKey
C.ShiftRows, MixColumns, AddRoundKey
D.SubBytes, MixColumns, AddRoundKey
Correct Answer: SubBytes, ShiftRows, AddRoundKey
Explanation:
The final AES round omits MixColumns and applies SubBytes, ShiftRows, and AddRoundKey.
Incorrect! Try again.
36How many 32-bit words are generated by the AES-128 key expansion, including the original key words?
AES Key Expansion and Ciphers
Medium
A.40 words
B.44 words
C.52 words
D.60 words
Correct Answer: 44 words
Explanation:
AES-128 requires 11 round keys of four 32-bit words each, producing words.
Incorrect! Try again.
37For AES-128 key expansion, which operation is applied when generating a word whose index is a multiple of 4?
AES Key Expansion and Ciphers
Medium
A.Rotate by one bit, substitute its first byte, then XOR the cipher key
B.Apply RotWord and SubWord to , XOR Rcon, then XOR
C.Apply MixColumns to , XOR Rcon, then XOR
D.Apply ShiftRows to , XOR SubWord, then append
Correct Answer: Apply RotWord and SubWord to , XOR Rcon, then XOR
Explanation:
At every fourth word, AES-128 uses .
Incorrect! Try again.
38An image encrypted with a block cipher still reveals repeated visual patterns because identical plaintext blocks produce identical ciphertext blocks. Which mode was most likely used?
Use of modern block ciphers
Medium
A.CTR mode
B.ECB mode
C.GCM mode
D.CBC mode
Correct Answer: ECB mode
Explanation:
ECB encrypts identical plaintext blocks under the same key into identical ciphertext blocks, exposing structural patterns.
Incorrect! Try again.
39During CBC transmission, one bit of ciphertext block is accidentally changed. What is the effect after decryption?
Use of modern block ciphers
Medium
A. is corrupted, and the matching bit in is flipped
B. remains correct, but the corresponding bit is flipped in every subsequent plaintext block
C.Only the matching bit in is flipped, while every later block remains unchanged
D.All plaintext blocks from onward become completely corrupted
Correct Answer: is corrupted, and the matching bit in is flipped
Explanation:
A changed unpredictably corrupts and flips the corresponding bit in . Blocks after are unaffected.
Incorrect! Try again.
40Two messages are encrypted in CTR mode using the same key and nonce. If their ciphertexts are and , what information becomes directly available to an attacker?
Use of modern block ciphers
Medium
A.
B.
C.
D. equals the authentication tag
Correct Answer:
Explanation:
Nonce reuse repeats the CTR keystream. XORing the ciphertexts cancels that keystream and reveals the XOR of the plaintexts.
Incorrect! Try again.
41In the AES field defined by , what is the product of the bytes 0x57 and 0x13?
GF(2^n) Fields
Hard
A.0xF9
B.0xFE
C.0xE1
D.0xCB
Correct Answer: 0xFE
Explanation:
Polynomial multiplication followed by reduction modulo gives 0xFE. Equivalently, 0x57 multiplied by 0x01, 0x02, and 0x10 and then XORed produces 0xFE.
Incorrect! Try again.
42Suppose the AES modulus were replaced by a reducible degree-8 polynomial over . Which consequence would most directly invalidate the algebraic construction of the AES S-box?
GF(2^n) Fields
Hard
A.Byte addition would no longer be equivalent to bitwise XOR
B.Every byte value would acquire multiple additive inverses
C.Some nonzero byte values would have no multiplicative inverse
D.Polynomial multiplication would cease to be associative
Correct Answer: Some nonzero byte values would have no multiplicative inverse
Explanation:
A quotient by a reducible polynomial contains zero divisors and is not a field. Therefore, some nonzero elements lack multiplicative inverses, breaking the inversion stage of the AES S-box.
Incorrect! Try again.
43Under the AES polynomial , which byte is the multiplicative inverse of 0x53?
GF(2^n) Fields
Hard
A.0x8F
B.0xB5
C.0xCA
D.0xC6
Correct Answer: 0xCA
Explanation:
The product of 0x53 and 0xCA, reduced modulo the AES polynomial, is 0x01. Thus 0xCA is the unique multiplicative inverse of 0x53.
Incorrect! Try again.
44The AES xtime operation multiplies a byte by in . What is xtime(0x83)?
GF(2^n) Fields
Hard
A.0x16
B.0x06
C.0x9B
D.0x1D
Correct Answer: 0x1D
Explanation:
Left-shifting 0x83 gives 0x06 after discarding the high bit. Because the original high bit was 1, reduction XORs 0x1B, yielding 0x06 XOR 0x1B = 0x1D.
Incorrect! Try again.
45Why can DES decryption use the same Feistel round implementation as encryption?
DES Structure
Hard
A.The expansion permutation becomes its own inverse
B.The round subkeys are applied in reverse order
C.The S-box inputs and outputs are exchanged
D.The initial permutation reverses every round
Correct Answer: The round subkeys are applied in reverse order
Explanation:
A Feistel network is invertible even when its round function is not. DES decryption uses the same round computation but supplies the 16 subkeys in the order .
Incorrect! Try again.
46Which statement precisely describes the role of the DES expansion permutation ?
DES Structure
Hard
A.It expands 32 bits to 48 bits by duplicating selected boundary bits
B.It expands 32 bits to 48 bits by repeating every second bit
C.It expands 32 bits to 48 bits by inserting key bits
D.It expands 32 bits to 48 bits by appending parity bits
Correct Answer: It expands 32 bits to 48 bits by duplicating selected boundary bits
Explanation:
The expansion forms eight 6-bit groups from the 32-bit right half. Adjacent groups share boundary bits, enabling XOR with the 48-bit round key and creating overlapping S-box dependencies.
Incorrect! Try again.
47A 6-bit input 101011 is supplied to DES S-box . Using the outer bits for the row and the inner four bits for the column, what is the 4-bit output?
DES Structure
Hard
A.1001
B.0111
C.1100
D.0011
Correct Answer: 1001
Explanation:
The outer bits 11 select row 3, while the inner bits 0101 select column 5. Entry is 9, represented as 1001.
Incorrect! Try again.
48Let under DES, and let an overbar denote bitwise complementation. Which relation follows from the DES complementation property?
Analysis and Security of DES
Hard
A.
B.
C.
D.
Correct Answer:
Explanation:
Complementing both the DES key and plaintext complements the ciphertext. This property can reduce work in some multi-target settings but does not increase the effective key length.
Incorrect! Try again.
49Which comparison between the classic differential and linear cryptanalysis attacks on full 16-round DES is most accurate?
Analysis and Security of DES
Hard
A.Differential uses about known plaintexts; linear uses about chosen plaintexts
B.Differential uses about chosen plaintexts; linear uses about known plaintexts
C.Differential uses about known plaintexts; linear uses about chosen plaintexts
D.Differential uses about ciphertexts; linear uses about chosen plaintexts
Correct Answer: Differential uses about chosen plaintexts; linear uses about known plaintexts
Explanation:
The classic full-DES differential attack requires roughly chosen plaintexts, whereas Matsui's linear attack requires roughly known plaintexts.
Incorrect! Try again.
50For a DES weak key, all 16 generated round subkeys are identical. Which property then holds for every plaintext ?
Analysis and Security of DES
Hard
A.
B.
C.
D.
Correct Answer:
Explanation:
When every round subkey is identical, reversing the subkey sequence has no effect. Encryption and decryption are therefore the same transformation, making encryption an involution.
Incorrect! Try again.
51AES maps input bytes into the state by . After ShiftRows, where does byte move?
AES Introduction
Hard
A.Row 2, column 1
B.Row 3, column 2
C.Row 1, column 2
D.Row 1, column 0
Correct Answer: Row 1, column 2
Explanation:
Byte initially occupies row 1, column 3. ShiftRows rotates row 1 left by one column, so it moves to row 1, column 2.
Incorrect! Try again.
52Applying the AES MixColumns transformation to the column [0xD4, 0xBF, 0x5D, 0x30] produces which output column?
AES Transformations
Hard
A.[0xD4, 0x5D, 0x30, 0xBF]
B.[0x04, 0x66, 0x81, 0xE5]
C.[0x66, 0x04, 0xE5, 0x81]
D.[0x2E, 0x7D, 0x7A, 0xD2]
Correct Answer: [0x04, 0x66, 0x81, 0xE5]
Explanation:
Multiplication by the fixed AES MDS matrix over maps the input column to [0x04, 0x66, 0x81, 0xE5].
Incorrect! Try again.
53A difference entering MixColumns has exactly one nonzero byte. Ignoring cancellation with other columns, how many nonzero output bytes must that column contain?
AES Transformations
Hard
A.At least two
B.Exactly three
C.Exactly four
D.At most one
Correct Answer: Exactly four
Explanation:
A single active input byte is multiplied by nonzero field constants in all four output positions. Since field multiplication by a nonzero constant preserves nonzero values, all four outputs are active.
Incorrect! Try again.
54A full nonfinal AES encryption round applies SubBytes, ShiftRows, MixColumns, and AddRoundKey in that order. Which sequence directly inverts that round when using the same untransformed round key?
A composition is inverted by applying inverse operations in reverse order. AddRoundKey is its own inverse because it is XOR with the round key.
Incorrect! Try again.
55Why is the AES S-box transformation bijective over all 256 byte values?
AES Transformations
Hard
A.The round constant selects a distinct output for each input
B.Field inversion and the affine map are both permutations
C.The affine map removes collisions from a reducible modulus
D.Field multiplication and byte rotation are both involutions
Correct Answer: Field inversion and the affine map are both permutations
Explanation:
Multiplicative inversion permutes the field when zero is mapped to zero. The following affine transformation has an invertible linear part, so their composition is bijective.
Incorrect! Try again.
56For AES-128, which expression correctly generates the first word beyond the original four key words?
AES Key Expansion and Ciphers
Hard
A.
B.
C.
D.
Correct Answer:
Explanation:
At indices divisible by , AES-128 transforms the previous word with RotWord, SubWord, and the appropriate round constant, then XORs the result with the word four positions earlier.
Incorrect! Try again.
57Which additional rule distinguishes the AES-256 key expansion from the AES-128 and AES-192 schedules?
AES Key Expansion and Ciphers
Hard
A.InvSubWord is also applied when the word index modulo 8 equals 4
B.Rcon is also applied when the word index modulo 8 equals 6
C.SubWord is also applied when the word index modulo 8 equals 4
D.RotWord is also applied when the word index modulo 8 equals 2
Correct Answer: SubWord is also applied when the word index modulo 8 equals 4
Explanation:
AES-256 applies the normal schedule core when the index is divisible by 8 and applies an additional SubWord without RotWord or Rcon when the index modulo 8 is 4.
Incorrect! Try again.
58In an AES equivalent inverse cipher implementation, how are the intermediate decryption round keys modified relative to the reversed encryption key schedule?
AES Key Expansion and Ciphers
Hard
A.They are transformed by InvMixColumns
B.They are transformed by InvShiftRows
C.They are transformed by MixColumns
D.They are transformed by InvSubBytes
Correct Answer: They are transformed by InvMixColumns
Explanation:
The equivalent inverse cipher applies InvMixColumns to each intermediate reversed round key. The first and last round keys remain untransformed.
Incorrect! Try again.
59Two equal-length plaintexts are encrypted with AES-CTR using the same key and initial counter value. What can an observer compute directly from the ciphertexts?
Use of modern block ciphers
Hard
A.
B.
C.
D.
Correct Answer:
Explanation:
Counter reuse produces the same keystream . Since , XORing the ciphertexts cancels and reveals the XOR of the plaintexts.
Incorrect! Try again.
60Assuming independent uniformly distributed 128-bit block outputs, approximately what is the probability of at least one collision after processing blocks?
Use of modern block ciphers
Hard
A.Approximately
B.Approximately
C.Approximately
D.Approximately
Correct Answer: Approximately
Explanation:
The birthday approximation is . With , this is approximately .
Incorrect! Try again.
Did this save you a night before the exam?
LPU Notes is free, and it stays free. Ads cover part of the server bill.
The rest comes out of a student's own pocket: the domain, the storage,
and keeping the site up through the weeks everyone needs it at once.
The payment button didn't load. An ad blocker or a filtered network is the usual reason.
to try again.
Nothing here is ever locked, and nothing unlocks. Chip in only if it was worth it.
What it pays for →