I have been checking Pairwise and Group Transient keys in a network for security. I understand

PTK is derived from = PMK, AP nonce (ANonce), STA nonce (SNonce), AP MAC address, and STA MAC address

This means that every client will have a different PTK since nonce will be different for each handshake. GTK same for every client.

If so, how can i see other computers requests from wireshark in the network that are not intended for broadcast? How can my pc decrypt those packets if ptk is used to encrypt them ?

I heard that PSK might be enough to decrypt any packet since it is derived from SSID + password with a hashing algorithm.. and since every client has the same psk, that works but if so ptk is used for what ?

Note : PMK = PSK


You must log in to answer this question.

Browse other questions tagged .