GPEN · Question #162
GSM uses either A5/1 or A5/2 stream cipher for ensuring over-the-air voice privacy. Which of the following cryptographic attacks can be used to break both ciphers?
The correct answer is B. Ciphertext only attack. Both A5/1 and A5/2 GSM stream ciphers have structural weaknesses exploitable using only intercepted ciphertext, making a ciphertext-only attack the applicable cryptographic technique.
Question
GSM uses either A5/1 or A5/2 stream cipher for ensuring over-the-air voice privacy. Which of the following cryptographic attacks can be used to break both ciphers?
Options
- AMan-in-the-middle attack
- BCiphertext only attack
- CKnown plaintext attack
- DReplay attack
How the community answered
(60 responses)- A17% (10)
- B72% (43)
- C3% (2)
- D8% (5)
Why each option
Both A5/1 and A5/2 GSM stream ciphers have structural weaknesses exploitable using only intercepted ciphertext, making a ciphertext-only attack the applicable cryptographic technique.
A man-in-the-middle attack is a network interception technique targeting communication channels, not a cryptanalytic method that breaks the mathematical structure of A5/1 or A5/2.
A ciphertext-only attack recovers key material using only intercepted ciphertext, with no need for known plaintext. Researchers demonstrated that A5/1 and A5/2 can be broken this way using precomputed rainbow tables derived from the ciphers' known keystream generation structure. This is the minimal-assumption attack that applies to both ciphers simultaneously.
A known plaintext attack requires access to both a plaintext message and its corresponding ciphertext, which is a stronger assumption than what a ciphertext-only attack requires.
A replay attack involves retransmitting previously captured messages to deceive a system and does not involve any cryptanalysis of the cipher algorithm itself.
Concept tested: Ciphertext-only cryptanalysis of GSM A5 stream ciphers
Topics
Community Discussion
No community discussion yet for this question.