33 reputation
14
bio website sanilunlu.com
location Turkey
age 28
visits member for 2 years, 9 months
seen Jul 25 '12 at 2:56

Jan
26
awarded  Notable Question
Jun
22
awarded  Popular Question
Oct
31
awarded  Supporter
Oct
31
awarded  Scholar
Oct
31
accepted Is it possible to speed up WPA/WPA2-PSK cracking using a rogue AP?
Oct
31
comment Is it possible to speed up WPA/WPA2-PSK cracking using a rogue AP?
So we can't be sure without having a detailed inspection on the construction of PTK. Unless there is some chosen-plain-text attack on HMAC construction or SHA-1, we can't gain any thing further than brute force.
Oct
31
comment Is it possible to speed up WPA/WPA2-PSK cracking using a rogue AP?
What I'm asking is exactly this, but I want a detailed and confident answer.
Oct
31
comment Is it possible to speed up WPA/WPA2-PSK cracking using a rogue AP?
What I'm trying to learn is if someone knows there may be some weakness in the use of crypto (hashing alg., etc.), so we can gain more information about the key having captured different PTKs computed using different ANonces. So we'll have for example 5 different PTK calculations which use 5 different ANonce values and same MACs, PMK but potentially different SNonces as the inputs. Rather than having one capture of 4-way handshake, having for example 5 different captures constructed using attacker-chosen ANonces.
Oct
29
comment Is it possible to speed up WPA/WPA2-PSK cracking using a rogue AP?
For many clients let's say that MAC address change is not a problem or if we want to be strict we can just use only the ANonce value. Our aim is not to ensure that user won't notice the change and know about a rogue AP. Let's assume we've succeed to trick the user/device. That's not a problem I think. The problem is, if we change this value for a few times and recapture 4-way handshakes for each, would this information help us cracking the password? I am asking that is it's helpful to speedup the cracking phase, that could be integrated into tools such as aircrack-ng, cowpatty and pyrit.
Oct
28
awarded  Student
Oct
28
asked Is it possible to speed up WPA/WPA2-PSK cracking using a rogue AP?