A security attack recovering secret passwords stored in a computer system or transmitted over a network. [Reference: after NIST.IR.7298]