nerdexam
GIAC

GPEN · Question #162

GSM uses either A5/1 or A5/2 stream cipher for ensuring over-the-air voice privacy. Which of the following cryptographic attacks can be used to break both ciphers?

The correct answer is B. Ciphertext only attack. Both A5/1 and A5/2 GSM stream ciphers have structural weaknesses exploitable using only intercepted ciphertext, making a ciphertext-only attack the applicable cryptographic technique.

Penetration Testing Foundations & Reconnaissance

Question

GSM uses either A5/1 or A5/2 stream cipher for ensuring over-the-air voice privacy. Which of the following cryptographic attacks can be used to break both ciphers?

Options

  • AMan-in-the-middle attack
  • BCiphertext only attack
  • CKnown plaintext attack
  • DReplay attack

How the community answered

(60 responses)
  • A
    17% (10)
  • B
    72% (43)
  • C
    3% (2)
  • D
    8% (5)

Why each option

Both A5/1 and A5/2 GSM stream ciphers have structural weaknesses exploitable using only intercepted ciphertext, making a ciphertext-only attack the applicable cryptographic technique.

AMan-in-the-middle attack

A man-in-the-middle attack is a network interception technique targeting communication channels, not a cryptanalytic method that breaks the mathematical structure of A5/1 or A5/2.

BCiphertext only attackCorrect

A ciphertext-only attack recovers key material using only intercepted ciphertext, with no need for known plaintext. Researchers demonstrated that A5/1 and A5/2 can be broken this way using precomputed rainbow tables derived from the ciphers' known keystream generation structure. This is the minimal-assumption attack that applies to both ciphers simultaneously.

CKnown plaintext attack

A known plaintext attack requires access to both a plaintext message and its corresponding ciphertext, which is a stronger assumption than what a ciphertext-only attack requires.

DReplay attack

A replay attack involves retransmitting previously captured messages to deceive a system and does not involve any cryptanalysis of the cipher algorithm itself.

Concept tested: Ciphertext-only cryptanalysis of GSM A5 stream ciphers

Topics

#GSM encryption#stream cipher#ciphertext-only attack#cryptanalysis

Community Discussion

No community discussion yet for this question.

Full GPEN Practice