GPEN · Question #365
Which of the following attacks allows an attacker to recover the key in an RC4 encrypted stream from a large number of messages in that stream?
The correct answer is D. FMS attack. The FMS attack is a cryptanalytic technique that exploits weaknesses in RC4's key scheduling algorithm to recover the encryption key by analyzing a large number of captured ciphertexts.
Question
Which of the following attacks allows an attacker to recover the key in an RC4 encrypted stream from a large number of messages in that stream?
Options
- ASYN flood attack
- BRainbow attack
- CZero Day attack
- DFMS attack
How the community answered
(61 responses)- A15% (9)
- B7% (4)
- C3% (2)
- D75% (46)
Why each option
The FMS attack is a cryptanalytic technique that exploits weaknesses in RC4's key scheduling algorithm to recover the encryption key by analyzing a large number of captured ciphertexts.
A SYN flood attack is a denial-of-service technique that overwhelms a server by sending many TCP SYN packets without completing the handshake, and has no relation to stream cipher cryptanalysis or key recovery.
A rainbow table attack uses precomputed hash-to-plaintext mappings to crack password hashes, not to recover stream cipher encryption keys from captured traffic.
A zero-day attack exploits a previously unknown and unpatched software vulnerability, and is entirely unrelated to cryptanalytic attacks against the RC4 stream cipher algorithm.
The FMS attack, named after its discoverers Fluhrer, Mantin, and Shamir, targets a statistical weakness in RC4's key scheduling algorithm (KSA) where certain 'weak' initialization vectors (IVs) leak bits of the secret key. By capturing a sufficiently large number of messages encrypted with these weak IVs, an attacker can statistically reconstruct the full RC4 key. This attack was famously exploited against WEP-encrypted Wi-Fi networks.
Concept tested: RC4 stream cipher FMS key recovery attack
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-77r1.pdf
Topics
Community Discussion
No community discussion yet for this question.