Certified Ethical Hacker (CEH v10) — Question 137

Which of the following cryptography attack is an understatement for the extraction of cryptographic secrets (e.g. the password to an encrypted file) from a person by a coercion or torture?

Answer options

• A. Chosen-Cipher text Attack
• B. Ciphertext-only Attack
• C. Timing Attack
• D. Rubber Hose Attack

Correct answer: D

Explanation

The correct answer is D, Rubber Hose Attack, which refers specifically to the act of extracting cryptographic secrets through coercion. The other options describe different types of cryptographic attacks that do not involve coercion or torture, such as analyzing ciphertext or exploiting timing variations.