ECES: EC-Council Certified Encryption Specialist

Module 1: Introduction and History of Cryptography

• Gaps in Crypto Knowledge
• What is Cryptography?
• History of Cryptography
• Mono-Alphabet Substitution
  〉 Caesar Cipher
  〉 Atbash Cipher
  〉 Affine Cipher
  〉 ROT13 Cipher
  〉 Scytale
  〉 Single Substitution Weaknesses
• Multi-Alphabet Substitution
  〉 Cipher Disk
  〉 Vigenère Cipher
  – Vig q enère Cipher: Example
  – Breaking the Vigenère Cipher
  〉 Gronsfeld Cipher
  〉 Playfair Cipher
  〉 Polybius Cipher
  〉 ADFGVX Cipher
• Homophonic Substitution
• Null Ciphers
• Book Ciphers
• Rail Fence Ciphers
• Vernam Cipher
• The Enigma Machine
• CrypTool

Module 2: Symmetric Cryptography and Hashes

• Symmetric Cryptography
• Information Theory
  〉 Information Theory Cryptography Concepts
• Kerckhoffs’s Principle
• Substitution
• Transposition
• Binary Math
  〉 Binary AND
  〉 Binary OR
  〉 Binary XOR
• Block Cipher vs. Stream Cipher
• Symmetric Block Cipher Algorithms
  〉 Basic Facts of the Feistel Function
  〉 S-Box
• S-Box Design
  〉 The Feistel Function
  〉 Unbalanced Feistel Cipher
  〉 Data Encryption Standard (DES)
  〉 3DES
  – DESx
  – Whitening
  〉 Advanced Encryption Standard (AES)
  – AES General Overview
  – AES Specifics
  〉 Blowfish
  〉 Serpent
  〉 Twofish
  〉 Skipjack
  〉 International Data Encryption Algorithm (IDEA)
  〉 CAST
  〉 Tiny Encryption Algorithm (TEA)
  〉 SHARK
  〉 GOST
  〉 McGuffin
• Symmetric Algorithm Methods
  〉 Electronic Codebook (ECB)
  〉 Cipher-Block Chaining (CBC)
  〉 Propagating Cipher-Block Chaining (PCBC)
  〉 Cipher Feedback (CFB)
  〉 Output Feedback (OFB)
  〉 Counter (CTR)
  〉 Initialization Vector (IV)
• Symmetric Stream Ciphers
  〉 Example of Symmetric Stream Ciphers: RC4
  〉 Example of Symmetric Stream Ciphers: FISH
  〉 Example of Symmetric Stream Ciphers: PIKE
• Hash Function
  〉 Hash – Salt
  〉 MD5
  – The MD5 Algorithm
  〉 MD6
  〉 Secure Hash Algorithm (SHA)
  〉 FORK-256
  〉 RIPEMD-160
  〉 Tiger
  〉 Blake
  〉 Haval
  〉 Whirlpool
  〉 Skein
  〉 NTLM – Windows Hashing
  – NTLM
  〉 MAC & HMAC
  〉 Key Stretching
• CryptoBench

Module 3: Number Theory and Asymmetric Cryptography

• Asymmetric Encryption
• Basic Number Facts
  〉 Prime Numbers
  〉 Mersenne Primes
  〉 Fermat Prime
• Co-Prime Numbers
  〉 Euler’s Totient
  〉 Summation
  〉 Modulus Operator
  〉 Congruence Numbers
  〉 Solving Congruence
  〉 Fibonacci Numbers
  〉 Algebraic Groups
  〉 Rings
  〉 Field
  〉 Galois Field
  〉 Logarithms
  〉 Natural Logarithms
  〉 Discrete Logarithms
• Birthday Theorem
  〉 Birthday Paradox
  – Birthday Paradox: Probability
  〉 Birthday Attack
• Random Number Generator
  〉 Classification of Random Number Generator
  〉 Traits of a Good PRNG
  〉 Middle Square Method
  〉 Naor-Reingold and Mersenne Twister Pseudorandom Function
  〉 Linear Congruential Generator
  〉 Lehmer Random Number Generator
  〉 Lagged Fibonacci Generator (LFG)
  〉 Blum Blum Shub
  〉 Yarrow
  〉 Fortuna
• Diffie-Hellman
• Rivest Shamir Adleman (RSA)
  〉 RSA – How it Works
  〉 RSA Example
• Menezes–Qu–Vanstone
• MQV
• Digital Signature Algorithm
  〉 Signing with DSA
• Elliptic Curve
  〉 Elliptic Curve Variations
  〉 Elliptic Curve
• Elgamal
• Cramer – Shoup
• YAK
• Forward Secrecy
• CrypTool

Module 4: Applications of Cryptography

• FIPS Standards
• Digital Signatures
• What is a Digital Certificate?
  〉 Digital Certificates
  – X.509
  – X.509 Certificates
  – X.509 Certificate Content
  – X.509 Certificate File Extensions
• Certificate Authority (CA)
• Registration Authority (RA)
• Certificate Authority – Verisign
• Certificate Types
• Public Key Infrastructure (PKI)
• Digital Certificate Terminology
• Server-based Certificate Validation Protocol
• Digital Certificate Management
• Trust Models
• Certificates and Web Servers
• Microsoft Certificate Services
• Windows Certificates: certmgr.msc
• Authentication
  〉 Password Authentication Protocol (PAP)
• 〉Shiva Password Authentication Protocol (S-PAP)
• 〉 Challenge-Handshake Authentication Protocol (CHAP)
• 〉 Extensible Authentication Protocol (EAP)
• 〉 Kerberos
• – Components of Kerberos System
• – Kerberos Authentication Process

• PGP Certificates
• Wi-Fi Encryption
  〉 Wired Equivalent Privacy (WEP)
  〉 WPA – Wi-Fi Protected Access
  〉 WPA2
  〉 WPA3
• SSL
• TLS
  〉 TLS v 1.3
• Diagram
• Protocols
• Common SSL/TLS Libraries
• Virtual Private Network (VPN)
  〉 Point-to-Point Tunneling Protocol (PPTP)
  – PPTP VPN
  〉 Layer 2 Tunneling Protocol VPN
  〉 Internet Protocol Security (IPSec) VPN
  – IPsec
  – IPSec – Terms
  – IPSec – Protocol Suite
  〉 SSL/TLS VPN
• Split Tunneling
• VPN Modes
• Encrypting Files
  〉 Backing up the EFS key
  〉 Restoring the EFS Ke
• BitLocker
  〉 BitLocker: Screenshot
• Common Cryptography: Mistakes
• Steganography
  〉 Steganography Terms
  〉 Historical Steganography
  〉 Steganography Details
  〉 Other Forms of Steganography
  〉 How to Embed?
  〉 Steganographic File Systems
  〉 Steganographic Software
  〉 Demonstration
• Steganalysis
  〉 Steganalysis – Raw Quick Pair
  〉 Steganalysis – Chi-Square Analysis
  〉 Steganalysis – Audio Steganalysis
• Steganography Detection Tools
• National Security Agency and Cryptography
  〉 NSA Suite A Encryption Algorithms
  〉 NSA Suite B Encryption Algorithms
  〉 National Security Agency: Type 1 Algorithms
  〉 National Security Agency: Type 2 Algorithms
  〉 National Security Agency: Type 3 Algorithms
  〉 National Security Agency: Type 4 Algorithms
• Unbreakable Encryption
• Blockchain

Module 5: Cryptanalysis

• Breaking Ciphers
• Cryptanalysis
• Frequency Analysis
• Kasiski
• Cracking Modern Cryptography
  〉 Cracking Modern Cryptography: Known Plaintext/ Chosen Plaintext Attack
  〉 Cracking Modern Cryptography: Ciphertext-only and Related-key Attack
• Linear Cryptanalysis
• Differential Cryptanalysis
• Integral Cryptanalysis
• Cryptanalysis Resources
• Cryptanalysis Success
• Rainbow Tables
  〉 Rainbow Table
• Password Cracking
• Tools

Module 6: Quantum Computing and Cryptography

• Quantum Computing and Cryptography
• Timeline
• Issues for QC
• Two Branches
  〉 Quantum Key Distribution (QKD)
  – QKD
  – What do we need?
  – Qubits
  – Trends
  〉 Quantum Key Distribution (QKD)
  – The Problem
  – Why?
• NIST
• Major Approaches
• Lattice-Based Crypto
• Learning with Errors
• GGH
• NTRU
• Overview
• Module Overview