EECC study guide
EECC · Work through your exam, one topic at a time.
The EC-Council Certified Encryption Specialist (EECC) is a foundational credential aimed at people who need a working, practical command of cryptography rather than a research mathematician's depth. Typical candidates are SOC analysts, IT administrators, developers, auditors, and compliance staff who must choose algorithms, read certificate chains, or explain why a given implementation is weak. The EECC study guide has 9 sections and about 3,171 words.
01Introduction to Cryptography and Encryption
This domain tests the vocabulary and security goals that every later domain depends on: what a cryptosystem is, which primitive delivers which property, and why classical ciphers survive as teaching models rather than usable tools. Cryptosystem components.
386 words, about 2 min02Symmetric Key Encryption
The exam tests whether you can pick the right symmetric algorithm and mode for a scenario, state realistic key strengths, and explain why the shared-key model creates a distribution problem. DES - 64-bit block, 56-bit key, 16-round Feistel network.
371 words, about 2 min03Asymmetric Key Encryption
This domain tests public-key mechanics: which hard problem backs each algorithm, what each one can and cannot do, and how hybrid encryption makes asymmetric cryptography practical. Two keys, two directions.
355 words, about 2 min04Hash Functions and Message Authentication
The exam tests the three hash security properties, current algorithm status, and the difference between a plain hash, a MAC, and a signature. Preimage resistance - given h, finding any m with H(m) = h is infeasible.
334 words, about 2 min05Public Key Infrastructure and Digital Certificates
This domain tests how a certificate binds an identity to a public key, and how a relying party decides whether to trust that binding. The certificate authority signs certificates; the registration authority verifies identity before issuance.
352 words, about 2 min06Digital Signatures and Key Management
This domain tests the signature operation, the standards behind it, and the lifecycle controls that keep private keys trustworthy. Hash the message, then apply the private key to the digest (RSA) or use the digest inside a signature scheme (DSA/ECDSA).
343 words, about 2 min07Cryptographic Protocols and Applications
This domain tests how primitives are composed into protocols, and which version fixes which weakness. TLS 1.2 offers RSA key transport or (EC)DHE, with CBC or GCM suites.
348 words, about 2 min08Cryptanalysis and Cryptographic Attacks
The exam tests attack classification: whether an attack targets the mathematics, the implementation, or the protocol, and what control actually stops it. Exhaustive and precomputed.
331 words, about 2 min09Cryptography Standards and Compliance
The exam tests which standard governs which requirement, and how to read a compliance claim critically. Validation of cryptographic modules across four increasing security levels: Level 1 basic; Level 2 tamper evidence plus role-based authentication; Level 3 tamper resistance with identity-based authentication and zeroisation; Level 4 physical envelope and environmental failure protection.
351 words, about 2 min