Knowledge check

Key wrapping and key exchange: moving keys without ever exposing them

10 questions testing what you just read — no login, no tracking, just immediate feedback.

Question 1 of 10

What determines whether AES Key Wrap or RSA-OAEP key transport is the right tool?

Question 2 of 10

Why is AES Key Wrap a dedicated construction rather than just AES-GCM applied to a key?

Question 3 of 10

How much overhead does AES Key Wrap (RFC 3394) add to a wrapped key, regardless of key size?

Question 4 of 10

What integrity-check value does AES Key Wrap use to detect an incorrect KEK during unwrapping?

Question 5 of 10

In a cross-KMS "Import Key Material" flow, what plays the role of the "recipient" in RSA-OAEP key transport?

Question 6 of 10

What genuinely distinct problem does Diffie-Hellman/ECDH key exchange solve, compared to key wrapping?

Question 7 of 10

Why does forward secrecy favor ECDHE over RSA-wrapped key transport for a live session?

Question 8 of 10

How large is a typical X25519 ephemeral public key used in ECDH key exchange?

Question 9 of 10

Which tool would a TLS 1.3 handshake use to establish a session key live, with forward secrecy?

Question 10 of 10

Which tool is best suited for moving a key between two services that already share a KEK inside the same trust domain?

0 / 10 answered