Cryptographic Attacks 2.4

Question 1

Birthday Attack

Answer 1

• Gets its name from the Bday paradox
• A hash collision is the same hash value for two different plaintexts
• Found through brute force

Question 2

Protection Against Birthday Attack

Answer 2

• Create large hash output size
• The larger the hash size the more difficult to duplicate the hash

Question 3

Collision Attack

Answer 3

• Two different input yield the same output of a hash function

Question 4

Downgrade Attack

Answer 4

• Purpose, to use a weaker form of encryption or not use any encryption at all.
• Forces the system to downgrade the security.

Question 5

Secure Socket Layer (SSL) Stripping

Answer 5

• Combines an on-path attack with a downgrade attack
• Attack sits in the middle of the conversation.
• Causes the victim to not use the non-encrypted HTTP protocol.
• The attacker will be able to monitor all traffic from the user and the server.