Home > Glossary > CompTIA Security+ Certification Exam > Cryptography

📖 What is Cryptography?

Cryptography is the science of securing communications and data through mathematical algorithms. It encompasses encryption, decryption, hashing, and digital signatures to ensure confidentiality, integrity, authentication, and non-repudiation of information.

🥋 Sensei Says:

"Understand the core cryptographic concepts: symmetric vs. asymmetric encryption, hashing functions, and digital certificates. Exam questions often test your ability to apply cryptography to specific security challenges. Know the strengths and weaknesses of different algorithms."

📚 Certification: CompTIA Security+ Certification Exam (SY0-701)

🔑 What are the Key Concepts of Cryptography?

▸ Symmetric encryption uses the same key for encryption and decryption, offering speed but requiring secure key exchange.
▸ Asymmetric encryption employs a key pair (public and private) enabling secure communication without prior key exchange.
▸ Hashing creates a one-way function producing a fixed-size output; used for integrity checks and password storage.
▸ Digital signatures verify authenticity and non-repudiation by encrypting a hash of the data with the sender’s private key.
▸ Cryptographic algorithms have varying key lengths; longer keys generally provide stronger security but require more processing power.

🎯 How does Cryptography appear on the SY0-701 Exam?

You may be asked to identify the appropriate cryptographic method to protect data at rest on a laptop, considering performance and security trade-offs.

A scenario might describe a company needing to verify the integrity of downloaded software – determine which cryptographic function would be used.

Expect questions about choosing the correct encryption type (symmetric vs. asymmetric) based on a given communication scenario and its security requirements.

❓ Frequently Asked Questions

What's the difference between a strong and weak hashing algorithm?

Strong hashing algorithms (like SHA-256) are resistant to collisions, where different inputs produce the same hash. Weak algorithms (like MD5) are vulnerable to collision attacks, compromising integrity.

When would I use a digital certificate instead of just encryption?

Digital certificates provide authentication. Encryption secures the data, but a certificate verifies the *identity* of the sender, preventing man-in-the-middle attacks and ensuring non-repudiation.

How does salting improve password security when using hashing?

Salting adds a random string to each password before hashing. This prevents attackers from using pre-computed rainbow tables to crack passwords, even if they obtain the hash database.

Related Terms from CompTIA Security+ Certification Exam

Regular Expression (Regex) Risk Mitigation Security Information and Event Management (SIEM) Hypervisor Threat Hunting Zero-Day Exploit

📝 Related Study Guides

Study Guide 9 min read

How to Pass CompTIA Security+ (SY0-701) on Your First Try

To pass CompTIA Security+ SY0-701 on your first try, build a structured 6-8 week study plan covering all five domains, prioritize understanding concepts over memorization, practice with scenario-based questions daily, and consistently score 85% or higher on practice exams before scheduling your test. Hands-on lab experience is essential for performance-based questions.

Deep Dive 8 min read

Zero Trust Architecture: Security+ (SY0-701) Deep Dive

Zero Trust architecture is a security framework based on the principle "never trust, always verify." Unlike traditional perimeter security, it assumes breaches are inevitable and requires strict identity verification for every person and device attempting to access resources, regardless of whether they are inside or outside the network perimeter.

Exam Tips 8 min read

Security+ PBQs: Master Firewall ACLs & Incident Response

Security+ Performance-Based Questions (PBQs) are scenario-driven simulations requiring you to apply knowledge to real-world tasks. To master them, focus on firewall ACL rule ordering, the "implicit deny" principle, and analyzing system logs for incident response. Consistent practice with high-fidelity simulations is the most effective way to ensure exam success.