GCFA · Question #257
You are the Security Consultant working with a client who uses a lot of outdated systems. Many of their clients PC's still have Windows 98. You are concerned about the security of passwords on a Windo
The correct answer is C. LANMAN. Windows 98 used the LAN Manager (LANMAN) hash algorithm for storing passwords, which is considered highly insecure by modern standards.
Question
You are the Security Consultant working with a client who uses a lot of outdated systems. Many of their clients PC's still have Windows 98. You are concerned about the security of passwords on a Windows 98 machine. What algorithm is used in Windows 98 to hash passwords?
Options
- ADES
- BSHA
- CLANMAN
- DMD5
How the community answered
(54 responses)- A9% (5)
- B15% (8)
- C72% (39)
- D4% (2)
Why each option
Windows 98 used the LAN Manager (LANMAN) hash algorithm for storing passwords, which is considered highly insecure by modern standards.
DES is a symmetric encryption cipher used internally within the LANMAN algorithm, but DES itself is not the name of the overall Windows 98 password hashing scheme.
SHA (Secure Hash Algorithm) was not used for Windows 98 password hashing; it became common in later Windows authentication protocols like NTLMv2.
LANMAN (LAN Manager) is the legacy password hashing scheme used in Windows 95, 98, and ME. It converts passwords to uppercase, pads or splits them into two 7-character chunks, and then applies DES encryption to each chunk independently. This design makes it extremely vulnerable to brute-force and rainbow table attacks.
MD5 was not used by Windows 98 for local password hashing; it appears in other contexts such as file integrity checks and older web authentication schemes.
Concept tested: Windows legacy LANMAN password hashing weakness
Source: https://learn.microsoft.com/en-us/windows-server/security/kerberos/passwords-technical-overview
Topics
Community Discussion
No community discussion yet for this question.