nerdexam
GIAC

GPEN · Question #445

What concept do Rainbow Tables use to speed up password cracking?

The correct answer is D. Time-Memory Trade-off. Rainbow tables exploit a time-memory trade-off by precomputing hash chains so that reversing a hash at crack time requires far less computation in exchange for storage space.

Exploitation & Post-Exploitation Techniques

Question

What concept do Rainbow Tables use to speed up password cracking?

Options

  • AFast Lookup Crack Tables
  • BMemory Swap Trades
  • CDisk Recall Cracking
  • DTime-Memory Trade-off

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    10% (2)
  • C
    5% (1)
  • D
    80% (16)

Why each option

Rainbow tables exploit a time-memory trade-off by precomputing hash chains so that reversing a hash at crack time requires far less computation in exchange for storage space.

AFast Lookup Crack Tables

Fast Lookup Crack Tables is not a recognized cryptographic or password cracking concept and does not describe the precomputed chain methodology used in rainbow tables.

BMemory Swap Trades

Memory Swap Trades is not a defined term in cryptanalysis; it incorrectly conflates operating system virtual memory management with cryptographic attack techniques.

CDisk Recall Cracking

Disk Recall Cracking is not an established security concept and does not accurately represent the precomputed reduction chain approach that defines how rainbow tables function.

DTime-Memory Trade-offCorrect

The time-memory trade-off (TMTO), formalized by Martin Hellman, is the core algorithmic principle behind rainbow tables. Rather than recomputing hashes on demand (pure time cost) or storing every possible hash-plaintext pair (pure memory cost), rainbow tables precompute and store reduction chains that allow an attacker to reverse an unsalted hash in seconds. This makes cracking common password hashes dramatically faster than brute-force methods, and is why salting is essential to defeat this attack.

Concept tested: Rainbow tables and time-memory trade-off in password cracking

Source: https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html

Topics

#rainbow tables#time-memory tradeoff#hash cracking#password cracking

Community Discussion

No community discussion yet for this question.

Full GPEN Practice