Multiple choice technology security

What kind of attack is a standard Diffie-Hellman exchange vulnerable to

  1. Man-in-the-middle

  2. social engineering

  3. None of above

  4. All of the above

Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Standard Diffie-Hellman key exchange without authentication is vulnerable to man-in-the-middle attacks because the parties cannot verify they're communicating directly with each other. An attacker can intercept the exchange and establish separate keys with both parties, then relay (and potentially modify) communications between them. This is why authenticated Diffie-Hellman or protocols like TLS are used in practice.