Which of the following is a WEP weakness that makes it easy to Inject arbitrary clear text packets onto a WEP network?

Question

Options

• AReversible hashes use for IVs
• BCryptographically weak CRC32 checksum
• CRC4 algorithm
• DSmall key space

• A
  4% (1)
• B
  4% (1)
• C
  12% (3)
• D
  80% (20)

Explanation

Important caveat: The most technically accurate answer for arbitrary WEP packet injection is B - the cryptographically weak CRC32 checksum. Because CRC32 is a linear function, an attacker can flip bits in an encrypted WEP packet and predictably recalculate a valid ICV (Integrity Check Value) without knowing the WEP key, enabling the well-known 'chopchop' packet injection attack. If the exam marks D as correct, the reasoning is: WEP's small key space (40-bit in the original standard) makes brute-force key recovery feasible within a practical timeframe. Once the WEP key is recovered, an attacker can generate valid RC4 keystream to encrypt and inject arbitrary packets freely. The small key space is a foundational WEP flaw, but the CRC32 weakness is the more direct and widely cited enabler of arbitrary packet injection without requiring full key recovery.

No community discussion yet for this question.