CEH Practice Question: Advanced Topics: Wireless, Cloud, IoT, Cryptography
Which of the following is a hashing algorithm that produces a 160-bit (20-byte) hash value?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
SHA-1
SHA-1 produces a 160-bit hash. MD5 produces 128 bits, SHA-256 produces 256 bits, and SHA-512 produces 512 bits.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
MD5
Why it's wrong here
MD5 (Message-Digest Algorithm 5) generates a 128-bit (16-byte) hash value, commonly represented as a 32-character hexadecimal string. While widely used historically for data integrity checks, MD5 is cryptographically broken due to known collision vulnerabilities, making it unsuitable for security applications requiring collision resistance. Therefore, it does not fit the criteria for a secure hashing algorithm producing a specific, larger output size often expected in modern contexts.
- ✗
SHA-256
Why it's wrong here
SHA-256, a member of the Secure Hash Algorithm 2 (SHA-2) family, produces a 256-bit (32-byte) hash value. This algorithm is considered cryptographically strong and is extensively used in various security protocols, including SSL/TLS, Bitcoin, and digital signatures, for its robust collision resistance. However, its output length of 256 bits does not match the specific hash size implied by the correct answer for this particular question.
- ✓
SHA-1
Why this is correct
SHA-1 (Secure Hash Algorithm 1) generates a 160-bit (20-byte) hash value, typically represented as a 40-character hexadecimal string. Historically, SHA-1 was a prevalent cryptographic hash function used for digital signatures and integrity verification, making it a common answer in questions about specific hash lengths. Despite its past widespread adoption, SHA-1 is now considered cryptographically insecure due to practical collision attacks and has been deprecated for most security-critical applications.
- ✗
SHA-512
Why it's wrong here
SHA-512 is another robust member of the Secure Hash Algorithm 2 (SHA-2) family, distinguished by its significantly larger 512-bit (64-byte) hash output. This algorithm offers a higher level of security and collision resistance compared to SHA-256, making it suitable for applications requiring extremely strong cryptographic assurances. While highly secure, its 512-bit output length does not align with the specific hash size that this question is implicitly asking for.
Go deeper
Related to this question
About these practice questions
One of 870 original CEH practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.