What type of attacks does the strength of a hash function protect against?

• A. Man-in-the-middle attacks
• B. Brute-force attacks
• C. Phishing attacks
• D. DDoS attacks

Answer: (B)

The strength of a hash function primarily protects against brute-force attacks. A hash function takes input data and produces a fixed-size string of characters, which appears to be random. It does this in such a way that even a small change in the input will produce a significantly different output, making it infeasible for an attacker to reverse the hash back to the original data.

In the context of a brute-force attack, where an attacker attempts to guess input values to find a matching hash, the computational effort required increases dramatically with stronger hash functions. These functions typically have properties like increased complexity and larger output size, which make it more challenging for an attacker to try all possible combinations to find an input that results in the same hash. As a result, a robust hash function drastically reduces the chances of success in brute-force attempts to compromise security.

In contrast, the other types of attacks listed, such as man-in-the-middle, phishing, and DDoS, operate on different principles and do not rely on breaking hash functions for their success. Man-in-the-middle attacks focus on intercepting communications, phishing exploits user deception, and DDoS involves overwhelming a system with traffic, which means the strength of a hash function does not directly protect against these attack vectors.