Windows LAN Manager (LM) hashes are known to be weak. Which of the following are known weaknesses of LM? (Choose three)

LM converts all password characters to uppercase before hashing, which eliminates case sensitivity and drastically reduces the effective keyspace an attacker must search during a brute-force or dictionary attack.

During NTLM-based authentication, the LM challenge-response derived from the hash is transmitted over the network in a form that allows attackers to capture and crack it offline, effectively exposing the underlying hash value.

LM does not use 32-bit encryption - it uses 56-bit DES keys. This choice describes a non-existent weakness; the actual cryptographic flaws stem from key derivation and password splitting, not a 32-bit key size.

LM splits the password into two independent 7-character segments padded with null bytes, then hashes each segment separately with DES, meaning an attacker only needs to crack a maximum of 7 characters per half rather than the full password length.