Re: WPA/WEP key discovery time



"Richard Revis" <richard.revis@xxxxxxxxxxxxxxxxxxx> writes:

Good morning. I'm looking for some hints about where to start looking to
determine how often to cycle the keys used in a WEP and WPA installation.

128 bit WEP typical transfer 5m bytes/day.

I think I would certainly change it at least once a day, maybe once an
hour.

From http://www.securityfocus.com/infocus/1814

__________________________________


However, the KoreK attacks change everything. No longer are millions of
packets required to crack a WEP key; no longer does the number of obviously
"weak" or "interesting" IVs matter. With the new attacks, the critical
ingredient is the total number of unique IVs captured, and a key can often
be cracked with hundreds of thousands of packets, rather than millions.
------------------------------------------




WPA (personal, static key) typical transfer 500m bytes/day.

Both are part of a layered system - no unencrypted traffic goes over the
link, and all the hosts only listen to SSH traffic - the priority is
That helps. WEP it seems does not.


stopping access to network resources and limiting the time avaialable to
abuse the machines on the network. The WEP network can't be dropped because
the device it handles has no other hardware support, but internal routing
limits it's access to the rest of the network.

A typical attacker would have access to a fast current generation machine,
there are a lot of students around here with far too much time on their
hands.


.



Relevant Pages

  • RE: Wireless Pent-Test
    ... If this is for home use have them turn WEP and MAC Address filtering on. ... You need to secure access to your protected network. ... So your VPN is ... his wireless network packets to make sure it is 128 bit encryption... ...
    (Pen-Test)
  • Re: HP2210 w/Linksys WCF54G wifi card (JC)
    ... the WEP settings are virtually identical...ie. ... "Jeff Cunningham" wrote in message ... Yes I am using WEP 128bit encryption. ... When I check one of the profiles, no "Network name" shows up and I ...
    (microsoft.public.pocketpc.wireless)
  • WPA/WEP key discovery time
    ... determine how often to cycle the keys used in a WEP and WPA installation. ... abuse the machines on the network. ...
    (sci.crypt)
  • RE: 802.11i research papers
    ... IT Infrastructure - Network Design ... Subject: 802.11i research papers ... with WPA which is the replacement to WEP (TKIP is ... WEP and other security features that the protocol has implemented. ...
    (Security-Basics)
  • Re: Wireless and "not so much on" internal attacks
    ... 128bit WEP. ... The question about internal attacks stems from the fact that customers have ... Wireless and "not so much on" internal attacks ... While on the network an attack would become more of an ...
    (Security-Basics)