nerdexam
GIAC

GPEN · Question #141

How many bits does SYSKEY use for encryption?

The correct answer is D. 128. SYSKEY encrypts the Windows SAM database using 128-bit RC4 encryption to protect stored password hashes.

Exploitation & Post-Exploitation Techniques

Question

How many bits does SYSKEY use for encryption?

Options

  • A32
  • B64
  • C512
  • D128

How the community answered

(36 responses)
  • A
    8% (3)
  • B
    3% (1)
  • C
    14% (5)
  • D
    75% (27)

Why each option

SYSKEY encrypts the Windows SAM database using 128-bit RC4 encryption to protect stored password hashes.

A32

32 bits is far too short for SYSKEY's encryption and does not correspond to the RC4 key length used by the SAM database protection mechanism.

B64

64 bits is associated with older DES symmetric encryption, not the RC4 algorithm that SYSKEY employs.

C512

512 bits is typical of asymmetric cryptography such as older RSA key sizes, not the symmetric RC4 stream cipher used by SYSKEY.

D128Correct

SYSKEY (SAM Lock Tool) uses a 128-bit RC4 encryption key to encrypt the Security Account Manager (SAM) database on Windows systems. This specific 128-bit key length is hardcoded into the SYSKEY implementation and applies to all three of its storage modes - stored in the registry, on a floppy disk, or derived from a passphrase.

Concept tested: SYSKEY SAM database RC4 encryption key length

Source: https://support.microsoft.com/en-us/topic/how-to-use-the-syskey-utility-to-secure-the-windows-security-account-manager-database-7b6e3df3-8a03-c1dd-7975-6c0db1607e07

Topics

#SYSKEY#Windows encryption#password storage#128-bit key

Community Discussion

No community discussion yet for this question.

Full GPEN Practice