A Security Engineer Is Attempting to Increase the Randomness of Numbers

question 355

Multiple Choice

A security engineer is attempting to increase the randomness of numbers used in key generation in a system. The goal of the effort is to strengthen the keys against predictive analysis attacks. Which of the following is the BEST solution?

• A) Use an entropy-as-a-service vendor to leverage larger entropy pools.
• B) Loop multiple pseudo-random number generators in a series to produce larger numbers.
• C) Increase key length by two orders of magnitude to detect brute forcing.
• D) Shift key generation algorithms to ECC algorithms.

---

Definitions:

Unintended Racism

Racial prejudice and discrimination that occur unintentionally, often as a result of implicit biases.

Representativeness Heuristic

Estimating the likelihood of events in terms of how well they seem to represent, or match, particular prototypes; may lead us to ignore other relevant information.

Availability Heuristic

Estimating the likelihood of events based on their availability in memory; if instances come readily to mind (perhaps because of their vividness), we presume such events are common.

Insight

A sudden realization of a problem’s solution; contrasts with strategy-based solutions.