Questions tagged [wpa2-psk]
Wi-Fi Protected Access 2 - Pre-Shared Key (also called WPA or WPA2 Personal) is a method of securing your network using WPA2 with the use of the optional Pre-Shared Key (PSK) authentication, which was designed for home users without an enterprise authentication server.
25
questions
2
votes
1
answer
90
views
Is PAKE more secure than WPA2?
As I understand it, in WPA2, the shared key (for encryption) is derived from the password, plus nonces and identities used in the initial 4-way exchange. An attacker who was able to sniff the initial ...
- 97
3
votes
0
answers
123
views
Is WPA2 collision-proof?
I was experimenting with hashcat and aircrack to test WiFi security.
The WiFi AP is a WPA2 encrypted network. The tool I used to ...
- 31
0
votes
0
answers
349
views
WPA/WPA password algorithm
I would like to understand the mechanism behind wpa/wpa2 algorithm. Is there any script that can put this theory:(Key = PBKDF2(HMAC−SHA1, passphrase, ssid, 4096, 256)) into action to test it ? I made ...
0
votes
1
answer
174
views
KRACK - Is all-zero key installed by the acces point?
I don't really understand (and I think it's not described in the official paper) how the encryption can work when the encryption key is set to 0 by a KRACK attack on a device using wpa_supplicant 2.4 ...
- 3
0
votes
1
answer
72
views
Can I Modified AES for enhaced security of WPA-2?
I have topic for my research paper is modified AES algorithm for enhaced security of WPA-2 , it posible ? what i should learn ?
thanks
1
vote
1
answer
997
views
What is the relation between AES and PTK in WPA2 wifi
I know that modern wpa2 wifis use AES key to encrypt data.
a client who has the password, can obtain psk/pmk use it for handshaking .
so what is the purpose of ptk, and how AES key is generated?
- 13
1
vote
3
answers
291
views
Does the Message Integrity Check in WPA(2) standard solve the problem of non-repudiation?
Whether the receiver can be sure that the message is sent by the source only and not spoofed by someone else?
- 13
2
votes
1
answer
175
views
Krack WPA2 decrypt only some small pieces of packets
I have gone through the paper (PDF) available at krackattacks.com.
However, from what I understood you force a key reinstallation causing you a nonce reuse over 2 blob of data. As it is a keystream, ...
- 41
4
votes
1
answer
2k
views
How Pairwise Transient Key is derived or generated?
I recently study WPA/WPA2 security and I want to know how PTK is derived. I found these parameters in the IEEE 802.11 standard (2012):
...
- 143
2
votes
1
answer
3k
views
What is CCM -- Counter Mode Cipher Block Chaining Message Authentication Code Protocol
CCM puts together two different modes of operation (at least in the name). Does it mean data is encrypted using counter mode and then encrypted using CBC; kind of a double encryption?
- 1,070
7
votes
1
answer
4k
views
How WPA2-PSK encryption works?
When a new client tries to connect with wi-fi, it enters a password which is provided by the wi-fi owner. I wonder what is so hard to capture this password by a hacker when it is being sent to router ...
- 318
1
vote
1
answer
3k
views
WPA/WPA2 Handshake -- Why are Nonces not encrypted?
During the WPA/WPA2 handshake, the client and AP compute a 256-bit Pre-shared Master Key (PMK) before exchanging Nonces that are used to compute the eventual key. Given that the hosts already have a ...
- 1,070
2
votes
0
answers
112
views
What is the exact algorithm and functions of the 4 way handshake?
I have to make a detailed diagram of the 4 way handshake and formulas for its functions so I need to know the exact process behind it. Like precisely what functions are used in it?
I have been trying ...
- 21
2
votes
1
answer
961
views
How do attacks on WEP work?
There is an abundance of tools and tutorials on how to break WEP encryption. However, I fail to find a nice resource that gives a clear break-down of why the attacks are possible. For example, I know ...
- 1,070
1
vote
0
answers
414
views
WPA-PSK authentication without password [closed]
Suppose I have a service in which I allow users to share their WiFi connection. When sharing their connection, users provide their WPA PSK password to my service.
Now if somebody wants to use this ...
- 277
4
votes
1
answer
504
views
Is WPA2(PKS) AES vulnerable to 4 way hand shake and brute force attack?
I can easily crack a WPA TKIP using a dictionary/brute force method, provided that I collect the four way handshake. Is the same method possible on WPA2 AES? I cannot find any articles about '4 way ...
- 193
4
votes
1
answer
2k
views
Understanding WPA2 authentication in details
As far as I know, WPA2 authentication consists of a 4-way handshake. The first message is from the AP, containing the ANounce, a random number generated by the AP, The second message is from the ...
- 41
11
votes
1
answer
29k
views
Encryption algorithm used in WPA/WPA2
I want to know how EXACTLY the WPA password gets encrypted
I have been searching through and I was able to catch:
The actual password is converted to some hash
Salting is applied to the hash
The ...
- 273
1
vote
1
answer
397
views
How is wpa2 authentication structured
I would like to understand the cryptography behind Wpa2. As far as I know, there are 4 messages on the 4-way handshake and three of them are values concatenated with hashes.
First, I am trying to ...
- 11
1
vote
0
answers
94
views
WPA and WPS: connection method [closed]
Do clients use WPS every time when they connect to a WPS-enabled AP? Or maybe they do it just the first time and then they switch to a normal WPA/WPA2 key exchange?
If the latter, it's possible for ...
1
vote
2
answers
1k
views
Why does WPA2-PSK use 4-way handshake instead of 2-way handshake
I don't seem to grasp why is the handshake for PTK in WPA2-PSK 4-way and not 2-way. Isn't it enough to just have these two steps:
First party sends Nonce1 to the other party
Second party sends to ...
- 113
6
votes
2
answers
2k
views
Encoding information in packet lengths to actively sidestep encryption
If you've only got an encrypted data channel can you actively sidestep the encryption and communicate with an outside party who can see the data but cannot decrypt it?
Yes - if you can find some ...
- 113
20
votes
6
answers
11k
views
Why does WPA-PSK not use Diffie-Hellman key exchange?
Is there a reason, why in pre-shared key mode, Wi-Fi session key is not secured with something like Diffie-Hellman but instead is derived from PSK key and some information exchanged in clear during ...
- 303
7
votes
1
answer
530
views
Can a user of a password-protected Wi-Fi sniff on other user's communication?
Imagine a Wi-Fi network protected by WEP/WPA/WPA2. Users can join the network in case they know the pre-shared key of the access point.
Is it possible for a user A (who has successfully logged into ...
- 173
8
votes
1
answer
2k
views
If the PSK is known, is it possible to decrypt traffic from other clients in a WPA2 wlan network?
If in a public WLAN WPA2-PSK is used, but the PSK is more or less publicly available, does this mean that an attacker with that PSK can easily decrypt wlan traffic from/to other clients of that WLAN?
...
- 183