A junior analyst at a logistics firm is comparing symmetric and asymmetric cryptography while planning how two servers will exchange data. Which statement most accurately captures the essential difference between the two approaches?
- ASymmetric cryptography always uses a public and private key pair, whereas asymmetric cryptography relies on a single shared secret key for both parties.
- BSymmetric cryptography can only protect data in transit across a network, whereas asymmetric cryptography can only protect data at rest on storage.
- CSymmetric cryptography uses one shared secret key for both encryption and decryption, whereas asymmetric cryptography uses a mathematically linked public and private key pair. Correct
- DSymmetric cryptography provides non-repudiation through key pairs, whereas asymmetric cryptography cannot support digital signatures.
Why A is wrong: Tempting because it uses the right vocabulary, but it reverses the two definitions, so it describes each model incorrectly.
Why B is wrong: Plausible if a learner ties each type to one data state, but both approaches can protect data in transit or at rest, so the restriction is false.
Why C is correct: Correct: symmetric schemes such as AES rely on a single shared key, while asymmetric schemes such as RSA use a related public and private key pair, which is the defining distinction.
Why D is wrong: Attractive because non-repudiation is a real property, but it is asymmetric cryptography that enables signatures and non-repudiation, so this statement is inverted.