Assessment Worksheet

111

LAB #7 – ASSESSMENT WORKSHEET

Relate Windows Encryption and Hashing to Confidentiality and Integrity
Course Name and Number:
CSIA301

Overview
This lab demonstrated how hashing tools can be used to ensure message and file transfer integrity and how encryption can be used to maximize confidentiality. Common hashing and encryption tools, including MD5, SHA1, and GnuPG, were used. You used GnuPG to generate both a public and private key and a secret key for encryption only.

Lab Assessment Questions & Answers
1. If you and another person want to encrypt messages, should you provide that person with your public

7
Relate Windows Encryption and Hashing to Confidentiality and Integrity

key, private key, or both?
In theory you could, but I you are taking the time out to make in the encrypted messages I'm assuming you wouldn't want others to know, but I think you have to provide the person with both you need both to access the

messages.

2. What does GPG allow you to do once it is installed?
GPG is specifically a command line tool that enables you to encrypt and sign your data and communication and includes a

key management system as well as access modules for all kind of public key directories.

3. Name two different types of encryption supported by GPG for your key.

112

LAB #7 | Relate Windows Encryption and Hashing to Confidentiality and Integrity
4. What happens when you sign and trust a new key to your keychain?

5. If a user sends you his/her public key, will he/she be able to decrypt your encrypted messages once you

import and sign his/her key?

6. What are the similarities between an MD5 hash and a fingerprint?

Fingerprints are created by applying a cryptographic hash function to a public key.

You need a fingerprint to create a hash.

7. How would you encrypt a Web server and the pages