Tag Info

New answers tagged


If a password is strong, then it is strong. WPA2 uses PBKDF2 with 4096 iterations and the network SSID as salt to turn the password into the shared secret. This is not bad. This means that a "strong" password will be, in this case, a password with 68 bits of entropy or more: the 4096 iterations add 12 bits to the brute force effort, and I use the traditional ...


Choose a cryptographically strong PRNG to generate a 12 characters password. That will too sufficient because it will give you 71 bits of entropy, which is safe and secure against all of the attacks that attackers might try to attack your password. This way, you do not need to change your password everyday and it is not only too secure but also practical in ...


But is the PTK derived by all clients different or the same? Short answer: YES. Longer answer: With WPA-PSK, you configure each WLAN node (access points, wireless routers, client adapters, bridges) not with an encryption key, but rather with a plain-English passphrase that contains up to 133 characters. Using a technology called TKIP ...


The PTK is derived by all clients by using the following attributes: PMK (Pairwise Master Key), AP nonce (ANonce), STA nonce (SNonce), AP MAC address, and STA MAC address. That means that a different PTK will be derived for each 4 way handshake, although the PSK is the same.


The message "fixed channel mon0:-1" usually means there are some problems with the compat-wireless package. Try to install the newer version using the following instructions: http://aircrack-ng.org/doku.php?id=compat-wireless


No. The "WPA key" (actually PSK) is never sent to or from the AP. The client and server both independently generate the PSK from the passphrase and SSID. As part of the handshake the client and server will both encrypt data with the PSK and send it to the other entity. That data is used to create the session key for encrypting all subsequent data between ...


WPA/WAP2 does not use a dedicated random salt. Instead it was designed to use the SSID as a salt value. This is better than no salt but it does mean some access points are vulnerable. For quite a while most routers would ship with a static SSIS ('linksys' or 'default'). So while hackers can't just precompute a single set of passphrases they could ...

Top 50 recent answers are included