Part of the DJames Network / DJames617
Explore the Network
DJames617Personal, professional, creative, and educational hubNerdDualCyber operations, intelligence, resources, and public toolsHDJamesAuthenticated application lab and proving ground
DJames617 The DoWell Nerd

SSCP Lab

Cryptographic Control Selection Lab

Choose controls by security property instead of by buzzword.

Back to LabsPractice SSCP

Goal

Choose controls by security property instead of by buzzword.

Estimated cost: Free when performed with local diagrams, exports, or test data. If you use a real cloud, lab, or SaaS environment, verify cost and authorization first.

Concepts Reinforced

  • hashing
  • encryption
  • signatures
  • HMAC
  • PKI

Prerequisites

  • A non-production lab, diagram, or exported sample data.
  • Authorization to review the data or configuration.
  • A text editor or spreadsheet for notes.

Exact Steps

  1. Create five requirements: confidentiality, integrity, authenticity, non-repudiation, and password storage.
  2. Select a fitting control for each.
  3. Write what key or secret must be protected.
  4. Write one failure mode for each control.

Verification

Each control maps to the required property and includes key-management notes.

Cleanup

No real secrets should be used; delete sample files.