Fundamentals of InfoSecadvanced
A digital signature verifies correctly, but the receiver wants to know whether the message is new. What is the best conclusion?
Answer
Verification alone does not prove freshness; replay remains possible.
Explanation
### Why this is right
A valid signature can be attached to a message that was signed earlier. The signature supports authenticity and integrity, but it does not by itself distinguish a new message from a replay.
### The concept
Freshness is a separate property from signature validity. A receiver needs some way to assess whether a message is current, because a captured signed message may be sent again. The course specifically warns that a signature alone does not establish that a message is new.
### The other options
- **B. Verification proves the message was created moments ago**: a signature contains no such freshness proof by itself.
- **C. Verification guarantees the message is confidential**: signatures do not conceal content.
- **D. Verification proves that every Certificate Authority trusts the message**: trust depends on accepted authorities and appropriate certificate details.
### Remember
A valid signature can still be replayed.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free