GPEN · Question #262
Which of the following are the countermeasures against WEP cracking? Each correct answer represents a part of the solution. Choose all that apply.
The correct answer is A. Using the longest key supported by hardware. C. Changing keys often. D. Using a non-obvious key.. WEP cracking relies on collecting weak initialization vectors and analyzing keystream patterns, so using longer keys, rotating keys frequently, and choosing complex keys all reduce an attacker's effectiveness.
Question
Which of the following are the countermeasures against WEP cracking? Each correct answer represents a part of the solution. Choose all that apply.
Options
- AUsing the longest key supported by hardware.
- BUsing a 16 bit SSID.
- CChanging keys often.
- DUsing a non-obvious key.
How the community answered
(27 responses)- A74% (20)
- B26% (7)
Why each option
WEP cracking relies on collecting weak initialization vectors and analyzing keystream patterns, so using longer keys, rotating keys frequently, and choosing complex keys all reduce an attacker's effectiveness.
Using the maximum supported key length (e.g., 128-bit instead of 40-bit) significantly expands the keyspace, making brute-force and statistical attacks like the FMS attack require far more captured packets and computation.
SSID length has no effect on WEP's RC4 cipher strength, initialization vector weaknesses, or keystream reuse vulnerabilities that make WEP susceptible to cracking.
Changing keys often limits the volume of ciphertext collected under a single key, reducing the statistical data available for IV-based attacks that depend on large packet captures.
Using a non-obvious, complex key reduces the risk of dictionary and guessing attacks targeting the shared WEP secret.
Concept tested: WEP wireless security countermeasures
Source: https://csrc.nist.gov/publications/detail/sp/800-97/final
Topics
Community Discussion
No community discussion yet for this question.