Which Technique Strengthens an Encryption Key Against Brute-Force Attacks?
Kevin, an encryption specialist, implemented a technique that enhances the security of keys used for encryption and authentication. Using this technique, Kevin input an initial key to an algorithm that generated an enhanced key that is resistant to brute-force attacks. What is the technique employed by Kevin to improve the security of encryption keys?
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The question tests the distinction between key hardening via stretching and adjacent cryptography terms, with the common trap being to choose the broader key derivation function option.
Kevin is using key stretching, which takes an initial key and repeatedly processes it to produce an enhanced key that is intentionally expensive to brute-force. The page confirms why key stretching—not PKI, a generic KDF, or key reinstallation—is the CEH-scoped answer.
Learners often pick key derivation function because KDFs can implement stretching, but the stem’s specific wording about enhancing an initial key into a brute-force-resistant key matches the CEH definition of key stretching.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Key stretching directly matches the scenario: Kevin inputs an initial key into an algorithm that deliberately adds computational work—typically repeated hashing or iteration—to produce an enhanced key that is much harder to guess by brute force. The phrase “enhances the security of keys used for encryption and authentication” is the CEH description of key stretching, not certificate trust management or attack recovery. Each brute-force attempt becomes significantly more expensive because the attacker must repeat the stretching process for every candidate key. This is why key stretching is used for password-derived keys and other low-entropy key material.Why the Other Options Are Wrong
Public key infrastructure manages certificates, certificate authorities, and trust chains; it does not take an initial key and generate a hardened derived key for brute-force resistance. Key derivation function is closely related and can be used to implement stretching, but in the CEH taxonomy the specific technique described—turning an initial key into an enhanced key for encryption and authentication—is key stretching, while KDF is the broader primitive. Key reinstallation is a vulnerability or attack condition, such as reusing a nonce in wireless handshakes, not a technique for strengthening encryption keys. The option set therefore separates a concrete hardening method from unrelated or broader cryptography concepts.Community Comment Notes
insaniunt described key stretching as increasing “the computational difficulty of deriving the original key,” which aligns with the CEH answer and the brute-force resistance in the stem. shaody emphasized that the initial key is given as input to an algorithm that produces an enhanced key, matching the question’s wording almost exactly. ariel004 argued for a key derivation function, which is the main distractor because KDFs and key stretching overlap conceptually, but the CEH-scoped answer remains key stretching. LordXander simply cited the CEHv12 question reference, confirming this is a known exam item rather than a novel edge case.Official Reference
Exam Strategy
When a CEH question describes turning an initial key into an enhanced, brute-force-resistant key, first look for key stretching before choosing the broader KDF term. Read the stem for the phrase “encryption and authentication,” which is a strong clue toward the textbook key-stretching definition.
Frequently Asked Questions
Why is key derivation function (C) not the best answer if KDFs can stretch keys?
CEH separates key stretching as the specific hardening technique described in the stem; a KDF is the broader mechanism that key stretching may use, but the enhanced-key wording maps to key stretching.
Does key stretching make encryption keys immune to brute-force attacks?
No, it increases the computational cost per guess, making brute force impractical with enough iterations and salt; it does not make keys mathematically immune.