Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.

Questions tagged [wpa2-psk]

Wi-Fi Protected Access 2 - Pre-Shared Key (also called WPA or WPA2 Personal) is a method of securing your network using WPA2 with the use of the optional Pre-Shared Key (PSK) authentication, which was designed for home users without an enterprise authentication server.

Filter by
Sorted by
Tagged with
1
vote
1answer
69 views

What is the relation between AES and PTK in WPA2 wifi

I know that modern wpa2 wifis use AES key to encrypt data. a client who has the password, can obtain psk/pmk use it for handshaking . so what is the purpose of ptk, and how AES key is generated?
0
votes
0answers
19 views

Need clear explanation in 802.1x authentication

What is KCK, KTK and TK in WPA2 authentication? Where can I find the whole 802.1x authentication flow with this full information?
1
vote
3answers
112 views

Does the Message Integrity Check in WPA(2) standard solve the problem of non-repudiation?

Whether the receiver can be sure that the message is sent by the source only and not spoofed by someone else?
2
votes
1answer
156 views

Krack WPA2 decrypt only some small pieces of packets

I have gone through the paper (PDF) available at krackattacks.com. However, from what I understood you force a key reinstallation causing you a nonce reuse over 2 blob of data. As it is a keystream, ...
3
votes
1answer
550 views

How Pairwise Transient Key is derived or generated?

I recently study WPA/WPA2 security and I want to know how PTK is derived. I found these parameters in the IEEE 802.11 standard (2012): ...
2
votes
1answer
2k views

What is CCM — Counter Mode Cipher Block Chaining Message Authentication Code Protocol

CCM puts together two different modes of operation (at least in the name). Does it mean data is encrypted using counter mode and then encrypted using CBC; kind of a double encryption?
5
votes
1answer
2k views

How WPA2-PSK encryption works?

When a new client tries to connect with wi-fi, it enters a password which is provided by the wi-fi owner. I wonder what is so hard to capture this password by a hacker when it is being sent to router ...
1
vote
1answer
1k views

WPA/WPA2 Handshake — Why are Nonces not encrypted?

During the WPA/WPA2 handshake, the client and AP compute a 256-bit Pre-shared Master Key (PMK) before exchanging Nonces that are used to compute the eventual key. Given that the hosts already have a ...
1
vote
0answers
92 views

What is the exact algorithm and functions of the 4 way handshake?

I have to make a detailed diagram of the 4 way handshake and formulas for its functions so I need to know the exact process behind it. Like precisely what functions are used in it? I have been trying ...
1
vote
1answer
616 views

How do attacks on WEP work?

There is an abundance of tools and tutorials on how to break WEP encryption. However, I fail to find a nice resource that gives a clear break-down of why the attacks are possible. For example, I know ...
1
vote
0answers
325 views

WPA-PSK authentication without password [closed]

Suppose I have a service in which I allow users to share their WiFi connection. When sharing their connection, users provide their WPA PSK password to my service. Now if somebody wants to use this ...
4
votes
1answer
295 views

Is WPA2(PKS) AES vulnerable to 4 way hand shake and brute force attack?

I can easily crack a WPA TKIP using a dictionary/brute force method, provided that I collect the four way handshake. Is the same method possible on WPA2 AES? I cannot find any articles about '4 way ...
3
votes
1answer
958 views

Understanding WPA2 authentication in details

As far as I know, WPA2 authentication consists of a 4-way handshake. The first message is from the AP, containing the ANounce, a random number generated by the AP, The second message is from the ...
8
votes
1answer
16k views

Encryption algorithm used in WPA/WPA2

I want to know how EXACTLY the WPA password gets encrypted I have been searching through and I was able to catch: The actual password is converted to some hash Salting is applied to the hash The ...
1
vote
1answer
326 views

How is wpa2 authentication structured

I would like to understand the cryptography behind Wpa2. As far as I know, there are 4 messages on the 4-way handshake and three of them are values concatenated with hashes. First, I am trying to ...
1
vote
0answers
82 views

WPA and WPS: connection method [closed]

Do clients use WPS every time when they connect to a WPS-enabled AP? Or maybe they do it just the first time and then they switch to a normal WPA/WPA2 key exchange? If the latter, it's possible for ...
1
vote
2answers
823 views

Why does WPA2-PSK use 4-way handshake instead of 2-way handshake

I don't seem to grasp why is the handshake for PTK in WPA2-PSK 4-way and not 2-way. Isn't it enough to just have these two steps: First party sends Nonce1 to the other party Second party sends to ...
6
votes
2answers
1k views

Encoding information in packet lengths to actively sidestep encryption

If you've only got an encrypted data channel can you actively sidestep the encryption and communicate with an outside party who can see the data but cannot decrypt it? Yes - if you can find some ...
15
votes
6answers
8k views

Why does WPA-PSK not use Diffie-Hellman key exchange?

Is there a reason, why in pre-shared key mode, Wi-Fi session key is not secured with something like Diffie-Hellman but instead is derived from PSK key and some information exchanged in clear during ...
6
votes
1answer
514 views

Can a user of a password-protected Wi-Fi sniff on other user's communication?

Imagine a Wi-Fi network protected by WEP/WPA/WPA2. Users can join the network in case they know the pre-shared key of the access point. Is it possible for a user A (who has successfully logged into ...
6
votes
1answer
2k views

If the PSK is known, is it possible to decrypt traffic from other clients in a WPA2 wlan network?

If in a public WLAN WPA2-PSK is used, but the PSK is more or less publicly available, does this mean that an attacker with that PSK can easily decrypt wlan traffic from/to other clients of that WLAN? ...