nerdexam
GIAC

GPEN · Question #456

Which of the following is the number of bits of encryption that 64-bit Wired Equivalent Privacy (WEP) effectively provides?

The correct answer is A. 64. 64-bit WEP is named for its total 64-bit RC4 key input, composed of a 40-bit secret key and a 24-bit Initialization Vector transmitted in plaintext.

Penetration Testing Foundations & Reconnaissance

Question

Which of the following is the number of bits of encryption that 64-bit Wired Equivalent Privacy (WEP) effectively provides?

Options

  • A64
  • B40
  • C60
  • D44

How the community answered

(62 responses)
  • A
    74% (46)
  • B
    8% (5)
  • C
    3% (2)
  • D
    15% (9)

Why each option

64-bit WEP is named for its total 64-bit RC4 key input, composed of a 40-bit secret key and a 24-bit Initialization Vector transmitted in plaintext.

A64Correct

64-bit WEP derives its name from the total key length fed into the RC4 cipher: a 40-bit user-supplied secret key plus a 24-bit Initialization Vector, yielding 64 bits total. The standard is labeled and marketed as '64-bit WEP' because 64 bits is the actual frame size used in the encryption process, even though the exposed IV reduces the effective secret key strength to only 40 bits.

B40

40 bits represents only the secret key portion of 64-bit WEP; the full RC4 input including the 24-bit IV totals 64 bits, which is the defined frame size.

C60

60 bits does not correspond to any component or combination of values in WEP's architecture - it is not the key size, IV size, or their sum.

D44

44 bits has no basis in WEP's design; WEP uses a fixed 40-bit key and 24-bit IV, and no WEP variant produces a 44-bit value.

Concept tested: WEP 64-bit key structure including IV composition

Source: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc757419(v=ws.10)

Topics

#WEP#wireless encryption#802.11#key length

Community Discussion

No community discussion yet for this question.

Full GPEN Practice