Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

Imagine a Wi-Fi network protected by WEP/WPA/WPA2. Users can join the network in case they know the pre-shared key of the access point.

Is it possible for a user A (who has successfully logged into the network) to sniff on the data communication of another user B, entirely because A uses the same pre-shared key like B (and C, D, E....)?

share|improve this question
    
    
Note that this isn't precisely a duplicate, because he asks about WEP/WPA as well (which actually have a different answer than WPA2) –  poncho Mar 28 '12 at 20:35
1  
This might functionally be answered by this question on security? –  Ninefingers Mar 28 '12 at 21:43
    
Thank you two very much for your competent answers. Now I'm a little shocked regarding security in Wi-Fi networks even when using WPA2. Is there a way to circumvent this flaw? For instance, consider the use case where a Wi-Fi user does not want other Wi-Fi users to know which websites he is accessing. –  Abdull Mar 29 '12 at 14:00
add comment

1 Answer

up vote 8 down vote accepted

Well, it depends on the which protocol is being used.

For WEP and WPA, the keys used are derived directly from the pre-shared keys; that means that as long as you know the pre-shared keys, you can immediately decrypt packets as well.

On the other hand, WPA2 is somewhat stronger; the two sides exchange nonces to derive the keys. Hence, unless you listen into the initial exchange, you're out of luck. On the other hand, depending on when you start listening, this might not be that great of an improvement.

share|improve this answer
2  
When I've looked into wifi hacking, it sounds like a pretty common technique is to DoS the client over the air until it drops and reconnects. I believe this allows the attacker to observe the nonces exchanged at the initial handshake. –  Marsh Ray Mar 29 '12 at 15:43
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.