Which attack breaks down a passphrase into fingerprints comprising single and multi-character components?

• A. Toggle-Case Attack
• B. PRINCE Attack
• C. Fingerprint Attack
• D. Combinator Attack

Answer: (C)

Breaking a passphrase into fingerprints means treating the string as a sequence of small building blocks—fingerprints—that can be as short as a single character or a few characters long. An attacker collects or generates a library of these fingerprints and then looks for a sequence of fingerprints that, when stitched together (often with overlaps), reconstructs the original passphrase. This approach matches how many people actually create passphrases: by stringing together common substrings or fragments rather than relying on whole dictionary words. By allowing both single- and multi-character pieces and combining them in flexible ways, it becomes possible to recover passphrases that aren’t exact dictionary phrases but are built from recognizable substrings.

This is different from methods that only flip case variations or that rely on concatenating entire words from dictionaries, which would miss passphrases formed from smaller substrings or non-dictionary fragments.