nerdexam
GIAC

GCFA · Question #257

You are the Security Consultant working with a client who uses a lot of outdated systems. Many of their clients PC's still have Windows 98. You are concerned about the security of passwords on a Windo

The correct answer is C. LANMAN. Windows 98 used the LAN Manager (LANMAN) hash algorithm for storing passwords, which is considered highly insecure by modern standards.

Advanced Windows Artifacts & Browser Forensics

Question

You are the Security Consultant working with a client who uses a lot of outdated systems. Many of their clients PC's still have Windows 98. You are concerned about the security of passwords on a Windows 98 machine. What algorithm is used in Windows 98 to hash passwords?

Options

  • ADES
  • BSHA
  • CLANMAN
  • DMD5

How the community answered

(54 responses)
  • A
    9% (5)
  • B
    15% (8)
  • C
    72% (39)
  • D
    4% (2)

Why each option

Windows 98 used the LAN Manager (LANMAN) hash algorithm for storing passwords, which is considered highly insecure by modern standards.

ADES

DES is a symmetric encryption cipher used internally within the LANMAN algorithm, but DES itself is not the name of the overall Windows 98 password hashing scheme.

BSHA

SHA (Secure Hash Algorithm) was not used for Windows 98 password hashing; it became common in later Windows authentication protocols like NTLMv2.

CLANMANCorrect

LANMAN (LAN Manager) is the legacy password hashing scheme used in Windows 95, 98, and ME. It converts passwords to uppercase, pads or splits them into two 7-character chunks, and then applies DES encryption to each chunk independently. This design makes it extremely vulnerable to brute-force and rainbow table attacks.

DMD5

MD5 was not used by Windows 98 for local password hashing; it appears in other contexts such as file integrity checks and older web authentication schemes.

Concept tested: Windows legacy LANMAN password hashing weakness

Source: https://learn.microsoft.com/en-us/windows-server/security/kerberos/passwords-technical-overview

Topics

#LANMAN hash#Windows 98 authentication#password hashing#legacy credentials

Community Discussion

No community discussion yet for this question.

Full GCFA Practice