full-disclosure - Re: Once thought safe, WPA Wi-Fi encryption is cracked

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 7 Nov 2008 18:37:45 +0100
From: Thierry Zoller <Thierry@...ler.lu>
To: "Ivan ." <ivanhec@...il.com>
Cc: Full-Disclosure mailing list <full-disclosure@...ts.grok.org.uk>
Subject: Re: Once thought safe,
	WPA Wi-Fi encryption is cracked

Dear Ivan .,

WPA is not cracked, a way was found to brute TKIP.
This does not result in the data stream being decrypted by the way

WPA AES CCMP - is safe afaik.

I> To do this, Tews and his co-researcher Martin
I> Beck<http://www.computerworld.com/action/inform.do?command=search&searchTerms=Martin+Beck>found
I> a way to break the Temporal Key Integrity Protocol (TKIP) key, used by
I> WPA, in a relatively short amount of time: 12 to 15 minutes, according
I> to Dragos
I> Ruiu<http://www.computerworld.com/action/inform.do?command=search&searchTerms=Dragos+Ruiu>,
I> the PacSec conference's organizer.

I> http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9119258

-- 
http://secdev.zoller.lu
Thierry Zoller

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/