General Information

0) No proofs
1) 1 cheat sheet is allowed - 8.5 x 11. Both sides. Any format.
2) 2 hours exam
3) 6 questions. Do any 5.
4) Calculators allowed.

Specific Information

Question 1 - Introduction. Module 0.
-------------------------------------
a) Threat Trees are important. Question guaranteed.
Slides with example sent by email. Link:
http://www.ite.mh.se/~infos/Vt2003/Laborationer/Overkurs/DVD006_Risk_Analysis_II.pdf.


Question 2 - Symmetric Key Crypto - Module 1.
-----------------------------------------------
a) Should know general concepts like Perfect Cipher, Unconditional
Security, Product Ciphers, Super Encryption, Block Ciphers, Stream
Ciphers.
b) Should know overview of DES (slides 22, 27, 31).
Should know double DES and triple DES and their strengths and
weaknesses. Should know the cipher modes ECB, CBC and CFB and their
strengths and weaknesses. No meet in the middle attack.
c) No question on AES.
d) Relevant parts from the text - Chapter 9 - 9.1, 9.2. Chapter 11.1 , 11.2
(skip first page LFSR)



Question 3 -  Public Key Crypto/Signatures/Hash Functions - Module 2
--------------------------------------------------------------------------

a) In addition to slides read 9.3, 9.4 from text.
b) Know how to work RSA with small numbers. Will not insist on using
specific algorithms for inverse and multiplication.
c) Digital Signatures important. Encrypt and Sign, or Sign and Encrypt what is better?
d) Know what is a MAC.
e) HMAC
f) Slides 35, 39, 48, 61, 57 62 67 73 important
g) Do problems on page 242 of your text - problems 13, 16, 17,18,19,20,22,
ONE OF THESE QUESTIONS WILL BE ASKED AS PART OF QUESTION 3.


Question 4 - Key Exchange - Module 3
-------------------------------------
a) Read chapter 10 from text. skip 10.4.1, read  10.5.2,
read 10.6, skip 10.6.2.2
b) Need to understand all the attacks on protocols.
c) Public key trust, digital certificates question is guaranteed
d) Diffie-Hellman Important
e) Slides 19, 20 23 important
f) Do questions 2,6,8  9 from pages 273 of your text.


Question 5 - Identity / Authentication - Module 4
--------------------------------------------------
a) Read chapter 12 and 14.
b) Chapter 12 do problems 2, 8.


Question 6 - Design Principles - Module 5
-----------------------------------------
a) Read Chapter 13. Do problems at end of chapter.