jansson_mark
Markus Jansson
Premium
join:2001-08-05
Finland
| reply to Jason Cohen
Re: Questions about WPA2 and WPA
said by Jason Cohen  :
...WPA/WPA2-PSK with an arbitrary passprhase. If his AP's signal is stronger than your own your system will automatically attempt to authenticate with his AP. This will fail, but in attempting to authenticate, you have allowed the attacker to log your passphrase.
Wrong. In TKIP and AES-CCMP the actual passphrase is never sent to recipient. The passphrase acts as a shared secret and remains secret, since the actual passphrase is not sent to the AP nor to the client, its simply used as one part of data used to create hash to create encryption/decryption keys.
--
My computer security & privacy related homepage »www.markusjansson.net Use HushTools or GnuPG/PGP to encrypt any email before sending it to me to protect our privacy. |
