200-201 Question 173
Single answerA security analyst is tasked with implementing a secure key exchange mechanism for a system that uses public key cryptography. The analyst decides to use PKCS standards for this purpose. Which of the following PKCS standards is specifically designed for defining the syntax for encrypted keys and certificates?
- A
PKCS #1
- B
PKCS #7
- C
PKCS #12
- D
PKCS #5
Show answer and explanation
Correct answer: C
Explanation
PKCS #12 is the standard designed for securely storing and transporting private keys, certificates, and other sensitive credentials. It defines the syntax for encrypting these elements, making it the correct choice for the secure exchange of keys and certificates in a public key infrastructure.
- A. Incorrect.
PKCS #1 defines the RSA cryptography standard, including key generation and encryption/decryption processes. It does not deal with the storage or exchange of keys and certificates.
- B. Incorrect.
PKCS #7 is a standard for cryptographically signing and/or encrypting data. While it addresses secure data transmission, it does not specifically define encrypted key and certificate syntax.
- C. Correct.
PKCS #12 is a standard used for the secure storage and transport of private keys, certificates, and other credentials. It is specifically designed to define the syntax for encrypted keys and certificates.
- D. Incorrect.
PKCS #5 is related to password-based cryptography, specifically defining methods for securely deriving cryptographic keys from passwords. It is unrelated to the storage or exchange of keys and certificates.