<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:arial, helvetica, sans-serif;font-size:10pt"><div>Jonus, here is the catch.</div><div><br></div><div>you say " For each user, there are 10 public keys. 10 users imply 100 public keys" - but ALL these public keys are the same for all 10 users, they aren't different so 10 users still will imply 10 Public keys , even though author says "fully" communicate/Mesh technology. </div><div><br></div><div>Tom, I would select the answers you've chosen for both the questions. </div><div><br></div><div>Cheers, SB</div><div style="font-family:arial, helvetica, sans-serif;font-size:10pt"><br><div style="font-family:arial, helvetica, sans-serif;font-size:13px"><font size="2" face="Tahoma"><hr size="1"><b><span style="font-weight: bold;">From:</span></b> gerritsjs <gerritsjs@gmail.com><br><b><span style="font-weight: bold;">To:</span></b> The
CISSP Study Mailing list <cisspstudy@cccure.org>; Nimal Gunarathna <ng949@yahoo.com><br><b><span style="font-weight: bold;">Sent:</span></b> Tue, 19 January, 2010 22:02:56<br><b><span style="font-weight: bold;">Subject:</span></b> Re: [Cisspstudy] cisspstudy Digest, Vol 19, Issue 16<br></font><br>Nimal, Tom; <br><br> The question is "fully" communicated. Within a community of 10 users,<br>each user will have one private key. So we have 10 private keys. Public<br>keys are as follows: <br> For each user, there are 10 public keys. 10 users imply 100 public keys.<br> This makes a total of 110 keys. <br> <br>Think of a Mesh Technology. <br><br>Jonus<br><br>-----Original Message-----<br>From: <a ymailto="mailto:cisspstudy-bounces@cccure.org" href="mailto:cisspstudy-bounces@cccure.org">cisspstudy-bounces@cccure.org</a> [mailto:<a ymailto="mailto:cisspstudy-bounces@cccure.org"
href="mailto:cisspstudy-bounces@cccure.org">cisspstudy-bounces@cccure.org</a>]<br>On Behalf Of <a ymailto="mailto:twitwicki@hannaford.com" href="mailto:twitwicki@hannaford.com">twitwicki@hannaford.com</a><br>Sent: Tuesday, January 19, 2010 1:23 PM<br>To: Nimal Gunarathna<br>Cc: <a ymailto="mailto:cisspstudy@cccure.org" href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a><br>Subject: Re: [Cisspstudy] cisspstudy Digest, Vol 19, Issue 16<br><br><br><br>Hi Nimal,<br> I followed the same logic as you on this question. In order to get<br>to the 110 answer each public key would have to be counted each time it's<br>used which doesn't make sense. I've come across other examples from this<br>book that are very questionable, which leads me to believe that the<br>questions and answers have not been thouroughly vetted. Thank you for the<br>reply.<br><br> Tom Witwicki, CIPP<br>Director, Information Security<br>Hannaford
Bros. Co.<br>207-885-2073<br><br>Join me on Linkedin!<br><a href="http://www.linkedin.com/in/tomwitwicki" target="_blank">http://www.linkedin.com/in/tomwitwicki</a><br><br><br><br><br><br><br> <br> Nimal Gunarathna <br> <<a ymailto="mailto:ng949@yahoo.com" href="mailto:ng949@yahoo.com">ng949@yahoo.com</a>>
<br> To <br> 01/19/2010 04:07 <a ymailto="mailto:cisspstudy@cccure.org" href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a> <br> PM cc <br> <a ymailto="mailto:twitwicki@hannaford.com"
href="mailto:twitwicki@hannaford.com">twitwicki@hannaford.com</a> <br> Subject <br> Re: cisspstudy Digest, Vol 19, <br> Issue 16 <br>
<br> <br> <br> <br>
<br> <br><br><br><br><br> <br> Hi Tom,
<br> <br> This question puzzles me.. <br> In an asymmetric system how many keys are required for 10 users to fully <br> communicate? <br>
<br> Every user has a one private and a one public key. I can send my same <br> public <br> key to all others. For 10 people, 20 keys are needed.. I am not sure how <br> 110 come from? <br> Is this a private com session or just a different comm session with each <br> pair?
<br> <br> Thanks, <br> <br> Nimal Gunarathna
<br> <br> <br>
<br> --- On Tue, 1/19/10, <a ymailto="mailto:cisspstudy-request@cccure.org" href="mailto:cisspstudy-request@cccure.org">cisspstudy-request@cccure.org</a> <br> <<a ymailto="mailto:cisspstudy-request@cccure.org" href="mailto:cisspstudy-request@cccure.org">cisspstudy-request@cccure.org</a>> wrote: <br> <br> From: <a ymailto="mailto:cisspstudy-request@cccure.org"
href="mailto:cisspstudy-request@cccure.org">cisspstudy-request@cccure.org</a> <<a ymailto="mailto:cisspstudy-request@cccure.org" href="mailto:cisspstudy-request@cccure.org">cisspstudy-request@cccure.org</a>> <br> Subject: cisspstudy Digest, Vol 19, Issue 16 <br> To: <a ymailto="mailto:cisspstudy@cccure.org" href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a> <br> Date: Tuesday, January 19, 2010, 11:00 AM <br>
<br> Send cisspstudy mailing list submissions to <br> <a ymailto="mailto:cisspstudy@cccure.org" href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a> <br> <br> To subscribe or unsubscribe via the World Wide Web, visit
<br> <a href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org" target="_blank">http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</a> <br> or, via email, send a message with subject or body 'help' to <br> <a ymailto="mailto:cisspstudy-request@cccure.org" href="mailto:cisspstudy-request@cccure.org">cisspstudy-request@cccure.org</a> <br> <br> You can reach
the person managing the list at <br> <a ymailto="mailto:cisspstudy-owner@cccure.org" href="mailto:cisspstudy-owner@cccure.org">cisspstudy-owner@cccure.org</a> <br> <br> When replying, please edit your Subject line so it is more specific <br> than "Re: Contents of cisspstudy digest..." <br>
<br> <br> Today's Topics: <br>
<br> 1. cisspstudy - Cryptography questions (<a ymailto="mailto:twitwicki@hannaford.com" href="mailto:twitwicki@hannaford.com">twitwicki@hannaford.com</a>) <br> 2. Re: New to CISSP Cert (Mark Price) <br> 3. Re: New to CISSP Cert (jack wang) <br> 4. Re: New to CISSP Cert (Jeronimo Zucco) <br>
<br> <br> ---------------------------------------------------------------------- <br> <br> Message: 1 <br>
Date: Mon, 18 Jan 2010 14:48:26 -0500 <br> From: <a ymailto="mailto:twitwicki@hannaford.com" href="mailto:twitwicki@hannaford.com">twitwicki@hannaford.com</a> <br> To: <a ymailto="mailto:cisspstudy@cccure.org" href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a> <br> Subject: [Cisspstudy] cisspstudy - Cryptography questions <br> Message-ID:
<br> < <br> <a ymailto="mailto:OF8F407D94.BBDB76DE-ON852576AF.006B4314-852576AF.006CCD97@hannaford.com" href="mailto:OF8F407D94.BBDB76DE-ON852576AF.006B4314-852576AF.006CCD97@hannaford.com">OF8F407D94.BBDB76DE-ON852576AF.006B4314-852576AF.006CCD97@hannaford.com</a>> <br> <br>
Content-Type: text/plain; charset=US-ASCII <br> <br> <br>
<br> Hello all, <br> I'd like your thoughts on these questions from Michael Gregg's <br> CISSP <br> Practice questions: <br>
<br> In an asymmetric system how many keys are required for 10 users to fully <br> communicate? <br> <br> A. 10
<br> B. 20 <br> C. 45 <br> D 110 <br>
<br> The answer states D. 110 - "Each user would have his private, phus his <br> public key, plus each of the nine other public keys" <br> Shouldn't the answer be B. 20 because the public keys is only couned <br> once <br> for each private/public pair? This also seems consistent with the <br> formula
<br> for symmetric keys: N(N-1)/2 where N is the number of users needing to <br> communicate. In this case the secret key is only counted once even if <br> it's <br> shared between users. <br>
<br> <br> Here's another question that has me puzzled: <br> <br> Which cryptographic system can be used for integrity, authenticity and <br> non-repudiation?
<br> <br> A. Asymmetric encryption <br> B. Symmetric encryption <br> C. Hashing
<br> D. None of the above <br> <br> The answers states A. Asymmetric. Shouldn't the answer be D. None of the <br> above because Hashing is needed for integrity? <br>
<br> Your thoughts will be much appreciated. <br> <br> <br> Tom Witwicki, CIPP
<br> Director, Information Security <br> Hannaford Bros. Co. <br> 207-885-2073 <br>
<br> Join me on Linkedin! <br> <a href="http://www.linkedin.com/in/tomwitwicki" target="_blank">http://www.linkedin.com/in/tomwitwicki</a> <br> <br>
<br> <br> <br> <br>
<br> <br> ------------------------------ <br>
<br> Message: 2 <br> Date: Mon, 18 Jan 2010 21:47:45 +0000 <br> From: "Mark Price" <<a ymailto="mailto:prinext@gmail.com" href="mailto:prinext@gmail.com">prinext@gmail.com</a>> <br> To: "The CISSP Study Mailing list" <<a ymailto="mailto:cisspstudy@cccure.org" href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a>> <br> Subject: Re: [Cisspstudy] New to CISSP Cert
<br> Message-ID: <br> < <br> 1180962559-1263851266-cardhu_decombobulator_blackberry.rim.net-147941822- <br> @bda153.bisx.prod.on.blackberry> <br>
<br> Content-Type: text/plain <br> <br> I have heard each edition is an update of the previous plus more of the <br> latest technology and or standards. <br> I have the 4th and the DVD set,
they plus cccure.org worked for me. <br> V/r, <br> <br> Mark Price <br> PRINEXT
<br> c:240-743-7654 <br> <a ymailto="mailto:mprice@prinext.com" href="mailto:mprice@prinext.com">mprice@prinext.com</a> <br><span> <a target="_blank" href="http://www.prinext.com">www.prinext.com</a> </span><br>
<br> -----Original Message----- <br> From: Cert Prep <<a ymailto="mailto:bugtraq.mailbox@gmail.com" href="mailto:bugtraq.mailbox@gmail.com">bugtraq.mailbox@gmail.com</a>> <br> Date: Mon, 18 Jan 2010 13:22:40 <br> To: The CISSP Study Mailing list<<a
ymailto="mailto:cisspstudy@cccure.org" href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a>> <br> Subject: Re: [Cisspstudy] New to CISSP Cert <br> <br> Thanks Jeronimo. I will listen to it. <br>
<br> I have Shon Harris Second Edition which I bought many years back. I <br> have heard that 5th edition is about to come. Is it ok to prepare from <br> second edition until 5th edition is out? Does anybody know the <br> differences between 2nd and 4th? I am sure there will be many but are <br> those drastic to the extent that I will have to revise the stuff, <br> which I have already gone through using second edition, from 5th <br> edition once it is published? <br>
<br> Any help would be appreciated. <br> <br> Thanks. <br> Adam
<br> <br> On Mon, Jan 18, 2010 at 12:51 PM, Jeronimo Zucco <<a ymailto="mailto:jczucco@gmail.com" href="mailto:jczucco@gmail.com">jczucco@gmail.com</a>> <br> wrote: <br> > 2010/1/18 Cert Prep <<a
ymailto="mailto:bugtraq.mailbox@gmail.com" href="mailto:bugtraq.mailbox@gmail.com">bugtraq.mailbox@gmail.com</a>>: <br> >> Hi Folks, <br> >> <br> >> I am planning to prepare for CISSP Cert and would like to know which <br> >> book or material is best for the preparations.
<br> > <br> > <br> > <a href="http://www.cccure.org/flash/intro/player.html" target="_blank">http://www.cccure.org/flash/intro/player.html</a> <br> >
<br> > <br> > <br> > -- <br> > Jeronimo Zucco
<br> > <a href="http://jczucco.blogspot.com" target="_blank">http://jczucco.blogspot.com</a> <br> > <br> > _______________________________________________ <br> > cisspstudy mailing list
<br> > <a ymailto="mailto:cisspstudy@cccure.org" href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a> <br> > <a href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org" target="_blank">http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</a> <br> > <br>
<br> _______________________________________________ <br> cisspstudy mailing list <br> <a ymailto="mailto:cisspstudy@cccure.org" href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a> <br> <a href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org" target="_blank">http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</a>
<br> <br> ------------------------------ <br> <br> Message: 3
<br> Date: Tue, 19 Jan 2010 20:05:00 +0800 <br> From: jack wang <<a ymailto="mailto:windjie@gmail.com" href="mailto:windjie@gmail.com">windjie@gmail.com</a>> <br> To: The CISSP Study Mailing list <<a ymailto="mailto:cisspstudy@cccure.org" href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a>> <br> Subject: Re: [Cisspstudy] New to CISSP Cert <br> Message-ID:
<br> <<a ymailto="mailto:3c43566f1001190405t2bfd204as4a953dd160a5b92b@mail.gmail.com" href="mailto:3c43566f1001190405t2bfd204as4a953dd160a5b92b@mail.gmail.com">3c43566f1001190405t2bfd204as4a953dd160a5b92b@mail.gmail.com</a>> <br> Content-Type: text/plain; charset="iso-8859-1" <br> <br><span> Shon Harris Second Edition,plus <a target="_blank"
href="http://www.cccure.org,they">www.cccure.org,they</a> are enough </span><br> -------------- next part -------------- <br> An HTML attachment was scrubbed... <br> URL: < <br> <a href="http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20100119/0d" target="_blank">http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20100119/0d</a> <br> 0b7b8f/attachment-0001.html>
<br> <br> ------------------------------ <br> <br> Message: 4
<br> Date: Tue, 19 Jan 2010 10:34:19 -0200 <br> From: Jeronimo Zucco <<a ymailto="mailto:jczucco@gmail.com" href="mailto:jczucco@gmail.com">jczucco@gmail.com</a>> <br> To: The CISSP Study Mailing list <<a ymailto="mailto:cisspstudy@cccure.org" href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a>> <br> Subject: Re: [Cisspstudy] New to CISSP Cert
<br> Message-ID: <br> <<a ymailto="mailto:2d6b298c1001190434i6f1eb72ct1157b63b80fe9301@mail.gmail.com" href="mailto:2d6b298c1001190434i6f1eb72ct1157b63b80fe9301@mail.gmail.com">2d6b298c1001190434i6f1eb72ct1157b63b80fe9301@mail.gmail.com</a>> <br> Content-Type: text/plain; charset=ISO-8859-1 <br> <br>
All-in_one edition 5: <br> <br> <a href="http://www.amazon.com/CISSP-All-One-Guide-Fifth/dp/0071602178/ref=sr_1_2" target="_blank">http://www.amazon.com/CISSP-All-One-Guide-Fifth/dp/0071602178/ref=sr_1_2</a>? <br> ie=UTF8&s=books&qid=1263898897&sr=8-2 <br>
<br> I always recommend the last edition, because of updates and <br> corretions. Or you can read all erratas for your edition. <br> <br> 2010/1/19 jack wang <<a ymailto="mailto:windjie@gmail.com" href="mailto:windjie@gmail.com">windjie@gmail.com</a>>: <br><span> > ?Shon Harris Second
Edition,plus <a target="_blank" href="http://www.cccure.org,they">www.cccure.org,they</a> are enough </span><br> > <br> <br> <br> --
<br> Jeronimo Zucco <br> <a href="http://jczucco.blogspot.com" target="_blank">http://jczucco.blogspot.com</a> <br>
<br> <br> <br> ------------------------------ <br>
<br> _______________________________________________ <br> cisspstudy mailing list <br> <a ymailto="mailto:cisspstudy@cccure.org" href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a> <br> <a href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org" target="_blank">http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</a>
<br> <br> <br> End of cisspstudy Digest, Vol 19, Issue 16 <br> ****************************************** <br>
<br><br><br><br><br><br>_______________________________________________<br>cisspstudy mailing list<br><a ymailto="mailto:cisspstudy@cccure.org" href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a><br><a href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org" target="_blank">http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</a><br><br><br>_______________________________________________<br>cisspstudy mailing list<br><a ymailto="mailto:cisspstudy@cccure.org" href="mailto:cisspstudy@cccure.org">cisspstudy@cccure.org</a><br><a href="http://cccure.org/mailman/listinfo/cisspstudy_cccure.org" target="_blank">http://cccure.org/mailman/listinfo/cisspstudy_cccure.org</a><br></div></div><div style="position:fixed"></div>
<!-- cg5.c50.mail.in.yahoo.com compressed/chunked Tue Jan 19 07:48:07 PST 2010 -->
</div><br>
</body></html>