3 ms·
> The device ultimately needs the wifi passcode in plaintext. Why is this the case? There are a number of cryptographic methods of varying complexity which all
by nimih 4y ago
> The device ultimately needs the wifi passcode in plaintext.
Why is this the case? There are a number of cryptographic methods of varying complexity which allow a server to authenticate a client against a password without storing the password itself.
- asveikau 4y agoBecause if you had such a scheme it would no longer be wifi. WPA needs the device to have a key. You cannot replace WPA with your own key derivation scheme to avoid storing keys to keep this ridiculous statement in the blog post happy. Whatever scheme it is, it's probably compromised by rooting the device storing secrets... To make a reference to the quote used by Raymond Chen, the security flaw "rather involved being on the other side of this airtight hatchway".
- nimih 4y agoThat makes sense, thanks for clarifying.