What type of function helps protect against an attack where one party generates a message for another party to sign?

• A. Strong hash function
• B. Weak hash function
• C. Symmetric encryption
• D. Public key infrastructure

Answer: (A)

A strong hash function is designed to ensure data integrity and authenticity by producing a fixed-size output (the hash) for any given input, and it possesses specific properties that make it effective against certain types of attacks. In the context of protecting against an attack where one party generates a message for another party to sign, using a strong hash function is critical for several reasons.

Firstly, a strong hash function should be collision-resistant, meaning it should be computationally infeasible to find two different inputs that produce the same hash output. This is vital because if an attacker could generate a different message that results in the same hash, they could trick the signing party into signing a fraudulent message. The uniqueness of the hash output ensures that each message remains distinct, safeguarding against such impersonation.

Secondly, strong hash functions provide pre-image resistance, meaning it should be computationally infeasible to reverse-engineer the original message from its hash. This property ensures that even if an attacker knows the hash of a signed message, they cannot easily determine the content of that message, further protecting the signer from being misled into signing unwanted content.

Lastly, when a party signs a message, they typically sign the hash of the message rather than the message itself. This simplifies the signing process