Windows LAN Manager (LM) hashes are known to be weak. Which of the following are known weaknesses of LM? (Choose three)

LM converts all password characters to uppercase before hashing, which drastically reduces the keyspace from 96 possible characters per position to roughly 69, making brute-force attacks significantly faster.

In older Windows environments with LM authentication enabled, the LM hash response is transmitted during the challenge-response handshake and can be captured off the wire by a passive sniffer, allowing offline cracking.

LM uses 56-bit DES encryption, not 32-bit - the weakness is the short effective key length and the algorithm choice, but the bit width is 56, not 32.

LM splits the password into two independent 7-character chunks padded with nulls before applying DES, meaning an attacker only ever needs to crack two 7-character halves independently rather than a full-length password.