GSLC · Question #32
Wired Equivalent Privacy (WEP) is a security protocol for wireless local area networks (WLANs). It has two components, authentication and encryption. It provides security equivalent to wired…
The correct answer is A. WEP uses the RC4 encryption algorithm. B. Automated tools such as AirSnort are available for discovering WEP keys. D. The Initialization Vector (IV) field of WEP is only 24 bits long. WEP has several well-documented weaknesses including its use of RC4, its short 24-bit IV, and the availability of automated cracking tools - while it is actually weaker than WPA, not stronger.
Question
Wired Equivalent Privacy (WEP) is a security protocol for wireless local area networks (WLANs). It has two components, authentication and encryption. It provides security equivalent to wired networks for wireless networks. WEP encrypts data on a wireless network by using a fixed secret key. Which of the following statements are true about WEP? Each correct answer represents a complete solution. Choose all that apply.
Options
- AWEP uses the RC4 encryption algorithm.
- BAutomated tools such as AirSnort are available for discovering WEP keys.
- CIt provides better security than the Wi-Fi Protected Access protocol.
- DThe Initialization Vector (IV) field of WEP is only 24 bits long.
How the community answered
(56 responses)- A91% (51)
- C9% (5)
Why each option
WEP has several well-documented weaknesses including its use of RC4, its short 24-bit IV, and the availability of automated cracking tools - while it is actually weaker than WPA, not stronger.
WEP uses the RC4 stream cipher to encrypt data, applying it with a combination of the shared secret key and the Initialization Vector to produce a keystream that is XORed with plaintext.
Because WEP's 24-bit IV space is small and IVs are reused quickly, tools like AirSnort and Aircrack-ng can passively collect enough weak IV packets to statistically recover the WEP key within minutes.
WEP provides significantly weaker security than WPA; WPA introduced TKIP with per-packet key mixing and a larger IV (48 bits), directly addressing the cryptographic flaws of WEP.
WEP's Initialization Vector is only 24 bits long, which means the IV space is exhausted quickly on busy networks, leading to IV reuse and making the encryption vulnerable to statistical analysis attacks.
Concept tested: WEP encryption weaknesses - RC4, IV length, and cracking tools
Source: https://learn.microsoft.com/en-us/windows/win32/nativewifi/wep
Topics
Community Discussion
No community discussion yet for this question.