Which option best describes the measures to address insecure crypto storage?

Which option best describes the measures to address insecure crypto storage?

• A. Use strong crypto algorithms and keys.
• B. Keep keys in plaintext.
• C. Use weak crypto algorithms.
• D. Do not encrypt data.

Answer: (A)

Protecting stored cryptographic material hinges on using strong cryptographic algorithms and robust key management. When you choose strong algorithms (like AES with adequate key lengths) and implement proper key handling—storing keys separately from encrypted data, enforcing strict access controls, rotating keys, and limiting their life span—you reduce the risk that encrypted data can be decrypted if storage is compromised. This approach directly addresses insecure crypto storage by ensuring both the data and the keys are protected and managed securely. Keeping keys in plaintext exposes them directly, making it easy for an attacker who breaches storage to decrypt data. Using weak crypto algorithms means they can be broken with available tools, compromising confidentiality. Not encrypting data leaves sensitive information unprotected at rest, which is a fundamental risk.

Protecting stored cryptographic material hinges on using strong cryptographic algorithms and robust key management. When you choose strong algorithms (like AES with adequate key lengths) and implement proper key handling—storing keys separately from encrypted data, enforcing strict access controls, rotating keys, and limiting their life span—you reduce the risk that encrypted data can be decrypted if storage is compromised. This approach directly addresses insecure crypto storage by ensuring both the data and the keys are protected and managed securely.

Keeping keys in plaintext exposes them directly, making it easy for an attacker who breaches storage to decrypt data. Using weak crypto algorithms means they can be broken with available tools, compromising confidentiality. Not encrypting data leaves sensitive information unprotected at rest, which is a fundamental risk.