Timeline for Does only having one end of a wifi connection patched reduce the risks from KRACK?
Current License: CC BY-SA 3.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 26, 2017 at 18:07 | vote | accept | Dan Is Fiddling By Firelight | ||
| Oct 18, 2017 at 4:39 | history | edited | Steffen Ullrich | CC BY-SA 3.0 |
added 40 characters in body
|
| Oct 17, 2017 at 20:32 | comment | added | Steffen Ullrich | @AndrolGenhald: From what I understand the first message 3 will cause a state change in the client and it will send message 4 which is then blocked by the attacker. The AP will then resend message 3 (with different replay counter) until it gets message 4. The attacker could capture and block these retransmits and replay these later to the client. But, if the AP does not retransmit message 3 in the first place the attacker cannot collect these retransmits. | |
| Oct 17, 2017 at 20:27 | comment | added | Steffen Ullrich | @Polynomial: The attacker makes sure that message 4 does not reach the AP so that the AP will retransmit message 3 (not an exact duplicate, but with changed replay counter) to the client. | |
| Oct 17, 2017 at 19:51 | comment | added | Polynomial | I'm not sure I understand the AP retransmit solution you propose here either. The retransmission is done by the client, not the AP. | |
| Oct 17, 2017 at 19:07 | comment | added | AndrolGenhald | Regarding patching the AP to not retransmit, I'm not sure that would be effective: "We show that an attacker can force these nonce resets by collecting and replaying retransmissions of message 3 of the 4-way handshake." from krackattacks.com. The wording "replaying retransmissions" seems a little weird to me, does that mean a retransmission specifically has to be replayed, or is it enough to replay the initial transmission? | |
| Oct 17, 2017 at 18:56 | history | edited | Steffen Ullrich | CC BY-SA 3.0 |
added 204 characters in body
|
| Oct 17, 2017 at 18:44 | history | edited | Steffen Ullrich | CC BY-SA 3.0 |
added 709 characters in body
|
| Oct 17, 2017 at 18:29 | history | answered | Steffen Ullrich | CC BY-SA 3.0 |