Cryptography attacks

Question 1

Known Plaintext Attack KPA Attack

Answer 1

Attacker has some encrypted text and some plain text known as the crib. The attacker could potentially decrypt the rest of the encrypted text.

Question 2

Rainbow table attack

Answer 2

Rainbow table is a range of hashes. Windows uses a different hashing method than my sql etc etc.

Note: Rainbow tables will not work with salted hashes.

Question 3

Dictionary Attack

Answer 3

Common words/passwords. Used for brute force.

Question 4

Brute Force Attack

Answer 4

Brute force attack uses every combination of hash, phrase, special character in order to break in.

Question 5

Birthday Attack

Answer 5

Attacker uses plain text to match your hash you are using for validation. To prevent this from happening use a larger hash size to avoid collision.

Question 6

Downgrade Attack

Answer 6

Attacker forces you to use older and weaker security mechanisms. (Force the system to downgrade their security).

Question 7

Cryptographic Replay Attack

Answer 7

A hash with no salt, no session ID tracking, no encryption means you are vulnerable to a replay attack. Kerberos prevents this, Kerberos using a timestamp. If the attacker tried to replay the packets, it would not work because the timestamp is after the time of day.