Tribhuwan University

Institute of Science and Technology

Model

Bachelor Level / Third Year / Fifth Semester / Science

Bachelors in Information Technology (BIT303)

(Information Security)

Full Marks: 60

Pass Marks: 24

Time: 3 Hours

Candidates are required to give their answers in their own words as for as practicable.

The figures in the margin indicate full marks.

Section A

Long Answers Questions

Attempt any TWO questions.
[2*10=20]
1.
How encryption decryption is done in RSA? In RSA system, consider the public key of a given user is (3, 55). What is the private key d? What is the cipher text C, if message M= hi?[10]

RSA Encryption and Decryption

RSA is an asymmetric encryption algorithm where encryption is done using the receiver's public key and decryption using the receiver's private key, based on the mathematical difficulty of factoring large prime numbers.


How Encryption and Decryption is Done in RSA

Key Generation:

  • Choose two large prime numbers p and q
  • Compute n=p×qn = p \times q
  • Compute Euler's totient: ϕ(n)=(p1)(q1)\phi(n) = (p-1)(q-1)
  • Choose public key e such that 1<e<ϕ(n)1 < e < \phi(n) and gcd(e,ϕ(n))=1\gcd(e, \phi(n)) = 1
  • Compute private key d such that e×d1(modϕ(n))e \times d \equiv 1 \pmod{\phi(n)}

Encryption:

  • Sender obtains receiver's public key (e, n)
  • Plaintext message M is converted to integer (where $M < n$)
  • Ciphertext is computed as:

C=MemodnC = M^e \mod n

Decryption:

  • Receiver uses their private key (d, n)
  • Plaintext is recovered as:

M=CdmodnM = C^d \mod n


Numerical Solution

Given: Public key = (e, n) = (3, 55)

Step A: Find private key d

Since n=55n = 55, we find p and q:

  • n=p×q=5×11=55n = p \times q = 5 \times 11 = 55
  • So p = 5, q = 11

Compute Euler's totient:

ϕ(n)=(p1)(q1)=(51)(111)=4×10=40\phi(n) = (p-1)(q-1) = (5-1)(11-1) = 4 \times 10 = 40

Find d such that e×d1(modϕ(n))e \times d \equiv 1 \pmod{\phi(n)}:

3×d1(mod40)3 \times d \equiv 1 \pmod{40}

We need dd such that 3dmod40=13d \mod 40 = 1

  • Try d=27d = 27: 3×27=81=2×40+13 \times 27 = 81 = 2 \times 40 + 1

Private key d = 27


Step B: Find Ciphertext for M = "hi"

Convert characters to numeric values (using position: a=1, b=2, ... h=8, i=9):

  • h = 8, i = 9

Encrypt 'h' (M = 8):

C1=83mod55=512mod55C_1 = 8^3 \mod 55 = 512 \mod 55

512÷55=9512 \div 55 = 9 remainder 1717

C1=17C_1 = 17

Encrypt 'i' (M = 9):

C2=93mod55=729mod55C_2 = 9^3 \mod 55 = 729 \mod 55

729÷55=13729 \div 55 = 13 remainder 1414

C2=14C_2 = 14


Final Answer

Item Value
Private key d 27
Ciphertext for 'h' 17
Ciphertext for 'i' 14
Ciphertext C 17, 14

Conclusion: RSA's security relies on the difficulty of factoring large numbers. The public key (e, n) encrypts data, while only the holder of private key (d) can decrypt it, making it ideal for secure communication and digital signatures.

2.
What are properties of hash function? In a hash function SHA-1, how padded message is computed before hash function computation? Using elongated message blocks from w0w_0 to w79w_{79} how can you compute the final hash value? For the 160 bit hash value represented by 5 words A, B, C, D, E, write the expressions for A79A_{79}, B79B_{79}, C79C_{79} after the last pass of the algorithm?[10]
3.
Consider a system having users U1, U2, U3 & files F1, F2 and F3 as F4. User U1 can read and write files F2 and F3. User U2 can read all the files but can perform write operation on F2. The user U3 can perform read operation on F3 and append on file F4. Now prepare access control matrix, access control list and capability list.[10]
Section B

Short Answers Questions

Attempt any Eight questions.
[8*5=40]
4.
What is digital signature? How it can be used for message authentication? [5]
5.
Define authentication system with its components. How challenge-response system can be used as an authentication system? [5]
6.
Discuss about different trust frameworks. [5]
7.
Define zombies, bots and rootkits. [5]
8.
How copyright is different from patent? [5]
9.
Describe security auditing architecture. [5]
10.
What is attack tree? Construct an attack tree for internet banking authentication. [5]
11.
Write an algorithm for Extended Euclidean Algorithm. Illustrate the algorithm for a=84 and b=320. [5]
12.
What is risk? How security risk analysis is done? [5]