funsec mailing list archives

Once thought safe, WPA Wi-Fi encryption is cracked


From: Juha-Matti Laurio <juha-matti.laurio () netti fi>
Date: Thu, 6 Nov 2008 13:38:36 +0200 (EET)

"Security researchers say they've developed a way to partially crack the Wi-Fi Protected Access (WPA) encryption 
standard used to protect data on many wireless networks.

The attack, described as the first practical attack on WPA, will be discussed at the PacSec conference in Tokyo next 
week.
There, researcher Erik Tews will show how he was able to crack WPA encryption, in order to read data being sent from a 
router to a laptop computer.
The attack could also be used to send bogus information to a client connected to the router.

To do this, Tews and his co-researcher Martin Beck found a way to break the Temporal Key Integrity Protocol (TKIP) key, 
used by WPA,
in a relatively short amount of time: 12 to 15 minutes, according to Dragos Ruiu, the PacSec conference's organizer.

They have not, however, managed to crack the encryption keys used to secure data that goes from the PC to the router in 
this particular attack."
--clip--

More at
http://www.pcworld.com/businesscenter/article/153396/once_thought_safe_wpa_wifi_encryption_is_cracked.html

Juha-Matti
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: