4 ms·
Wow. If this is legit, this one is really bad. It covers this case: 1) Bob and Alice go to a coffee shop that uses WPA2, but gives the password to paying custo
by teilo 16y ago
Wow. If this is legit, this one is really bad. It covers this case:
1) Bob and Alice go to a coffee shop that uses WPA2, but gives the password to paying customers.
2) Alice uses the exploit to acquire Bob's PSK.
3) Alice records and decrypts all of Bob's traffic.
- hannibalhorn 16y agoThat's always been possible - you can just enter the network password in Wireshark and watch everybody's traffic on a PSK network. You just have to capture the initial key negotiation traffic for a particular client. WPA(2) largely just made it more difficult to brute force network passwords (vs WEP) but did nothing for privacy of the users. Unless you're using certificates for authentication, everything you do is visible to anyone else who has the password. It's a shame, because it would have been very easy to address by just using Diffie Hellman when determining the session key.
- SpikeGronim 16y agoAgreed that shared secrets are not really that secret. "it would have been very easy to address by just using Diffie Hellman when determining the session key" Since WPA is implemented in hardware you must add gates to support Diffie Helman. This adds cost, resulting in a cost/security trade off.