In which context is it inappropriate to use a hash algorithm?

The correct answer is A. Telnet logins. Telnet is a legacy protocol that transmits all data-including credentials-in plaintext over the network. Applying a hash to a password before sending it over Telnet does not provide real security: an attacker intercepting the traffic captures the hash itself, which can then be…

Security Technologies

Question

Options

ATelnet logins
BVerifying file integrity
CSSH logins
DDigital signature verification

How the community answered

(42 responses)

A
76% (32)
B
5% (2)
C
12% (5)
D
7% (3)

Explanation

Telnet is a legacy protocol that transmits all data-including credentials-in plaintext over the network. Applying a hash to a password before sending it over Telnet does not provide real security: an attacker intercepting the traffic captures the hash itself, which can then be replayed directly (a 'pass-the-hash' attack). Hashing alone does not provide confidentiality or replay protection, making it inappropriate as a security measure within Telnet. By contrast, hashing is legitimately and correctly used in file integrity checks (e.g., MD5/SHA checksums), SSH logins (where passwords or keys are hashed within an encrypted tunnel), and digital signature verification (where the message is hashed before signing).

Topics

#hash algorithms#Telnet#plaintext protocols#cryptography

Community Discussion

No community discussion yet for this question.

Full 210-250 Practice