The KRACK (Key Reinstallation Attack) vulnerability is a critical WPA2 flaw covered extensively in CEH v13 Wireless Network Hacking. KRACK exploits weaknesses in the four-way handshake process, allowing attackers to force reinstallation of encryption keys.
This key reinstallation resets nonces and counters, enabling attackers to decrypt, replay, and forge packets, even on encrypted WPA2 networks. CEH v13 highlights that KRACK does not break encryption mathematically but exploits protocol logic flaws.
Hole196 affects GTK misuse, and WPS PIN attacks target authentication, not replay of encrypted traffic.
Weak RNG issues are unrelated to WPA2 replay.
Thus, Option B is correct.

IDOR vulnerabilities occur when applications expose internal object identifiers without enforcing authorization for each request. Attackers can modify predictable identifiers to access unauthorized resources. Proper server-side access control should verify that every authenticated user is permitted to access the requested object.

PGP (Pretty Good Privacy), SSL (Secure Sockets Layer), and IKE (Internet Key Exchange) use Public Key Cryptography for secure communication. They utilize:
Public and private key pairs
Asymmetric encryption for key exchange
Symmetric encryption for data confidentiality (after key exchange)
These protocols ensure secure data transfer over insecure networks.
Reference - CEH v13 Official Study Guide:
Module 20: Cryptography
Quote:
"Public key cryptography uses asymmetric key pairs for encryption and authentication. Protocols like PGP, SSL/TLS, and IKE rely on this to exchange keys and establish trust." Incorrect Options:
A & D. Digest/hash algorithms (e.g., MD5, SHA) ensure integrity, not encryption B). Secret key refers to symmetric encryption, which is used after the public key exchange, not as the basis for these protocols