Wireless security

From: Paul Crowley (paul_at_JUNKCATCHER.ciphergoth.org)
Date: 05/29/03 

Date: Thu, 29 May 2003 18:25:06 GMT

This isn't strictly speaking a sci.crypt question but I hope you'll
forgive my asking.

What do you need to look for on a wireless network product in order to
know that it is capable of securely encrypting and authenticating what
it carries?

I know that things like AirSnort and WEPCrack use the Fluhrer, Mantin,
Shamir attack to break WEP as originally fielded. I also understand
that a new AES based protocol is in the works. There seems to be
wireless equipment on the market branded "54g" which implements the
forthcoming 802.11g standard.

Will these new cards support the new, AES based protocol? If so, is
the new protocol secure? If not, is there any practical way of
getting link layer encryption for a wireless LAN today, or do I have
to rely on encryption in the higher levels (eg IPSec and ssh)?

Thanks in advance, 

-- 
  __  Paul Crowley
\/ o\ sig@paul.ciphergoth.org
/\__/ http://www.ciphergoth.org/

Relevant Pages

  • RE: [Full-Disclosure] Wireless Security
    ... The solution we chose was to implement WPA2 which includes AES ... maintaining a high level of security. ... encryption, you should go with a radius server and client. ... Subject: Wireless Security ...
    (Full-Disclosure)
  • Re: WEP vs WPA
    ... WEP encryption has been easily cracked and is ... considered grossly insecure. ... AES is considered more secure. ... Wireless security is enforced by the wireless access point. ...
    (alt.internet.wireless)
  • OpenAir pen-testing
    ... setup/issues of any "OpenAir" wireless devices? ... I can't seem to find any *real* information on the protocol, ... there is a shared security ID that needs to be sent to join the network. ... An earlier wireless LAN protocol endorsed by the Wireless LAN ...
    (Pen-Test)
  • Re: Budding wifi protocoler
    ... That days when wireless was magic and required high paid magicians are ... If you concentrate on just the protocol aspects, ... You'll find that these form the basis of most design work. ... Suffice to say that the real standard ...
    (alt.internet.wireless)
  • November 06, InternetNews.com - Weakness found in Wi-Fi security protocol.
    ... InternetNews.com - Weakness found in Wi-Fi security protocol. ... a Wi?Fi Protected Access protocol deployed in numerous Wireless LAN products. ... According to a research paper written by Moskowitz, the weakness could allow intruders to ...
    (microsoft.public.security.virus)