What kind of attack is a standard Diffie-Hellman exchange vulnerable to
-
Man-in-the-middle
-
social engineering
-
None of above
-
All of the above
A
Correct answer
Explanation
Standard Diffie-Hellman key exchange without authentication is vulnerable to man-in-the-middle attacks because the parties cannot verify they're communicating directly with each other. An attacker can intercept the exchange and establish separate keys with both parties, then relay (and potentially modify) communications between them. This is why authenticated Diffie-Hellman or protocols like TLS are used in practice.