In this attack, an adversary tricks a victim into reinstalling an already-in-use key. This is achieved by manipulating and replaying cryptographic handshake messages. When the victim reinstalls the…

Question

Options

• AEvil twin
• BChop chop attack
• CWardriving
• DKRACK

• A
  8% (2)
• C
  4% (1)
• D
  88% (22)

Explanation

KRACK (Key Reinstallation Attack)

D is correct because KRACK - which stands for Key Reinstallation Attack - is precisely defined by forcing a victim to reinstall a cryptographic key by replaying handshake messages, resetting nonces (packet numbers) to their initial values, which allows attackers to potentially decrypt, replay, or forge network traffic, particularly targeting WPA2 Wi-Fi protocols.

Why the distractors are wrong:

• A (Evil Twin): This attack involves setting up a rogue access point that mimics a legitimate one to intercept traffic - it has nothing to do with key reinstallation or handshake manipulation.
• B (Chop Chop Attack): This is an older WEP-specific attack that decrypts packets by repeatedly chopping bits and observing network responses - not related to handshake replay.
• C (Wardriving): This is simply the act of driving around to discover and map Wi-Fi networks - it is reconnaissance, not an active cryptographic attack.

Memory Tip: Think of KRACK as cracking a key by making the victim re-use it - the word "Key Reinstallation" is literally embedded in the acronym, making it self-descriptive and easy to remember on exam day.

No community discussion yet for this question.