Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

My friend wants to keep his home network super-secure, due to some trouble that he's had with unwelcome Wi-Fi intruders. So, naturally, he devised an ultra-long WPA2 passphrase (on the order of 100+ characters) to thwart any would-be intruders.

Now, to my knowledge, even a simple 10-character alphanumeric passphrase would be quite secure for everyday use. Nonetheless, he insists on overkill. My question is, can this gigantic passphrase be detrimental to the performance of the network, or somehow cause slowdown at all? And, why or why not?

This question arose because I was having trouble connecting an older laptop, running Xubuntu, to his WPA2 network, whereas the laptop connects and functions fine with other WPA2 networks.

share|improve this question
    
Most routers I've encountered max the PSK at 63 characters. Are you sure that password is "100+ characters"? –  Iszi Apr 29 '12 at 15:34
    
@Iszi: Well, I don't have it off hand to test my theory, but it definitely looked ridiculously long. For the sake of argument, let's say that the password is indeed "just" 63 characters - I think that's still too long to be useful. –  voithos Apr 29 '12 at 17:16
2  
Is there such a thing as an unnecessarily long password? –  Steve Apr 29 '12 at 17:39
    
@SteveS: I'd say, yes. When it's so long and random, that you can't hope to remember it (not in a million years), and have to resort to writing it on a piece of paper or holding it in a text file on your USB drive, then yes, I'd say it's too long. But I guess I'm just against the idea of trying to make security really big in the hopes that it will work better. Or perhaps overkill makes me uncomfortable? –  voithos Apr 30 '12 at 3:19
1  
@voithos For something that you have to enter one time per system it's not so bad. Mine's 63 characters, randomly generated, stored on a text file in an encrypted volume. Add on MAC address filtering for the network, and you'd better have a really good reason to want to use my Wi-Fi when you ask. ;-) –  Iszi Apr 30 '12 at 11:49

2 Answers 2

up vote 9 down vote accepted

No. It doesn't matter how long your passwords is because that value is never transmitted during the WPA-PSK Key Exchange. Instead a CMAC is calculated based on the secret key, the client and server id, as well as client and server provided large random values.

Regardless of how large your password is the resulting CMAC for WAP2-PSK will always be 128 bits:

MAC_P = CMAC-AES-128(AK, ID_P||ID_S||RAND_S||RAND_P)
share|improve this answer

No. A long passphrase will not cause slowdown.

The passphrase you type in is first converted to a fixed-size cryptographic key (e.g., a 128-bit key); no matter how long the passphrase, the cryptographic key will be the same size. Encryption and decryption take exactly the same amount of time, regardless of the length of your passphrase.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.