GSM uses either A5/1 or A5/2 stream cipher for ensuring over-the-air voice privacy. Which of the following cryptographic attacks can be used to break both ciphers?

A man-in-the-middle attack intercepts and relays communications at the protocol level but does not cryptanalyze or mathematically break the A5/1 or A5/2 cipher itself.

A known-plaintext attack requires access to paired plaintext and ciphertext samples, imposing a greater data requirement than the ciphertext-only techniques published for these ciphers.

A replay attack re-transmits previously captured encrypted frames to deceive a receiver but does not recover the cipher key or break the encryption algorithm.

A ciphertext-only attack exploits the statistical weaknesses and short effective key spaces of A5/1 and A5/2; Biryukov and Shamir demonstrated that A5/1 can be broken in real time using precomputed rainbow tables derived solely from intercepted ciphertext, while A5/2 is cryptographically weaker and breakable nearly instantly with ciphertext alone due to its intentionally reduced security design.