DataRiker
Premium
join:2002-05-19
Metairie, LA
clubs:
1 edit | TKIP still not broken
I just wanted to point out something, since the front page headlines are a bit misleading.
There is still no know flaw in the WPA cipher, and the new exploit does not allow recovery of the key, but rather under an almost impossible circumstance allows injection of packets.
Just thought I would add that before people start to compare it to the WEP cipher which is busted ( well its application is, the actual cipher is sound ) |
|
docrice
join:2008-03-31
Fremont, CA
| Is this what you're referring to?
»www.networkworld.com/news/2009/0···-fi.html
»jwis2009.nsysu.edu.tw/location/p···0WPA.pdf |
|
nwrickert
sand groper
Premium,MVM
join:2004-09-04
Geneva, IL | reply to DataRiker
I am taking a "wait and see" attitude at present. Some of the headlines seem overstated. But information is still a bit scant.
--
AT&T dsl; Speedstream 5100b modem; Zyxel NBG334W router; openSuSE 11.0; firefox 3.0.13 |
|
DataRiker
Premium
join:2002-05-19
Metairie, LA
clubs:
| said by nwrickert  :I am taking a "wait and see" attitude at present. Some of the headlines seem overstated. But information is still a bit scant. Overstated is an understatement. |
|
DataRiker
Premium
join:2002-05-19
Metairie, LA
clubs:
1 edit | reply to docrice
Yes, but more specifically the new headline on this site:
»Japanese Computer Scientists Crack WPA
The comments are already full of dire remarks and claims of "easy wpa cracking" ( all of which are wrong on all counts )
WPA-PSK is still as secure as it ever was. Brute force is still the only way to recover PSK key. |
|
hurleyp
join:2000-06-20
Ottawa, ON
 ·Rogers Hi-Speed
| SANS has posted a link to the paper in question:
»jwis2009.nsysu.edu.tw/location/p···0WPA.pdf
Broken or not, it seems that TKIP will fall soon. Prolly a good idea to switch to WPA with AES or WPA2, if your router supports it.
--
"I reject your reality and substitute my own." |
|
