Questions tagged [wpa2]
Security protocol (IEEE 802.11i) developed by the Wi-Fi Alliance to protect wireless networks.
327
questions
256
votes
5
answers
30k
views
Consequences of the WPA2 KRACK attack
Today new research was published on vulnerabilities in wireless network security called Krack.
What are the real-world consequences of these attacks for users and owners of wireless networks, what ...
- 62.1k
142
votes
9
answers
19k
views
To sufficiently protect against KRACK is patching the client, the AP, or both, required?
Following on from this question, I am unclear on which of the following steps are sufficient to protect a WPA2-based wifi connection from the KRACK flaw:
Patching the AP (e.g. router)
Patching the ...
- 2,001
119
votes
3
answers
19k
views
Why wasn't the KRACK exploit discovered sooner? [closed]
From what I've read, the issue is as simple as performing step 3 of a 4-step handshake and the consequences of performing that step more than once. Considering the complexity of these kinds of ...
- 890
45
votes
2
answers
2k
views
WPA2 ephemeral key derivation
I'm trying to learn how ephemeral keys in WPA2 4-way handshake are derived.
Starting from 4 EAPOL packets sniffing, I successfully derived PMK and PTK reading ANonce, SNonce, and knowing ASCII-PSK ...
- 551
43
votes
3
answers
50k
views
What is the best home wireless network encryption algorithm to use?
What is the best home wireless network encryption algorithm to use? I realize the best answer will probably change over time, and hopefully people can provide updated answers as new standards come ...
- 3,157
43
votes
4
answers
17k
views
Are WPA2 connections with a shared key secure?
This is something that has been bugging me for quite some time: when I have a wifi access point with WPA2 encryption and I give out the key, how secure are the connections? With WEP you could easily ...
vvanscherpenseel
41
votes
8
answers
147k
views
Why is WPA Enterprise more secure than WPA2?
In personal mode WPA2 is more secure than WPA. However, I have read that WPA Enterprise provides stronger security than WPA2 and I am unsure exactly how this is achieved.
user12199
35
votes
1
answer
4k
views
How does a nonce reset allow for decryption?
I'm sure that by now most InfoSec-lovers have heard about KRACK.
If you haven't, check out this great explaination by a fellow StackExchanger.
It's a new attack on WPA2 which allows for decryption ...
- 472
33
votes
3
answers
16k
views
How safe are Wi-Fi Hotspots? Because WPA 2 is compromised, is there any other security protocol for Wi-Fi?
WPA 2 can be cracked using Aircrack-ng in Kali Linux. Is there any other security protocol for Wi-Fi which is not compromised?
- 525
32
votes
6
answers
92k
views
Recommend Length for Wi-FI PSK?
I currently have a network set up with WPA2 and AES encryption, the password is 8 characters long but was randomly generated and contains no dictionary words. However I'm concerned about the ...
- 423
28
votes
2
answers
23k
views
Strength of WEP, WPA and WPA 2 PSK
I know there are three method for wifi security. What are the relative strengths of the password encryption in WEP, WPA and WPA2 PSK?
26
votes
1
answer
8k
views
What is stronger - WPA2 Enterprise with 2048 bit key, or Personal with 63 character passphrase?
Which of the two following has a stronger cryptographic strength in withstanding brute-force attacks?
WPA/WPA2 Enterprise using 2048-bit RSA public-key
WPA/WPA2 Personal using 63-character ...
- 261
26
votes
2
answers
114k
views
What are the difference between WPA2-PSK and WPA2-EAP-PSK?
What are the differences between WPA2-PSK and WPA2 EAP-PSK? What are the pros and cons of using one configuration or the other?
- 1,066
24
votes
1
answer
74k
views
How exactly does 4-way handshake cracking work?
From my understanding this is how WPA2 works for home networks:
PSK (Pre-Shared Key) is used to generate PMK (Pairwise Master Key), which is used together with ANonce (AP Nonce) to create PTK (...
- 467
23
votes
6
answers
10k
views
Why do coffee shops not use WPA/WPA2? Would it solve many problems if they did?
So I'm looking into public WiFi security in places such as hotels, coffee shops etc. It seems the current standard is just to use open wi fi connections in many of these locations. I would assume this ...
- 507
23
votes
3
answers
94k
views
Four-way Handshake in WPA-Personal (WPA-PSK)
Can someone explain to me in what consists the Four-way Handshake in WPA-Personal (WPA with Pre-Shared Key), which informations are being sent between AP and client, how is it possible to find the AP ...
- 399
23
votes
2
answers
5k
views
How is attacking WPA different from attacking WPA2?
What’s the difference between the process of attacking WPA and the process of attacking WPA2?
I know that WPA2 is much more secure than WPA. However, it seems the case that both of them are attacked ...
- 1,566
23
votes
3
answers
16k
views
Can someone get my WPA2 password with honeypots?
Yesterday I went to my cousin's home and I saw that I'm not connected to his wireless (for internet access). Then I have looked up the list of wireless points. I have found his name and clicked it ...
- 415
22
votes
1
answer
2k
views
WPA significantly less secure than WPA2?
I understand at least theoretically WPA2 is more secure than WPA, but in practice does it make any difference which one you use? From what I know there are no known attacks for either except for ...
- 3,536
17
votes
3
answers
10k
views
Is WPA2-Enterprise affected by the KRACK attack?
From my reading of the whitepaper it is the 4-way handshake that is vulnerable, but WPA2-Enterprise uses a RADIUS server for authentication, so is it also exploitable? And if so, how?
- 173
17
votes
5
answers
154k
views
Bruteforce on 10 characters length WPA2 password
I'm trying to hack my own WPA2 network for learning purposes.
I have the *.cap file generated by aircrack-ng tools after a WPA handshake.
I've tested by including my own password and a bunch of ...
- 521
16
votes
2
answers
5k
views
How does WPA2-PSK prevent evil twin password phishing?
Let's say we have a WPA2-PSK secured AP and there are several clients like smartphones and notebooks that automatically connect to it.
Now if someone was to create another AP that looked completely ...
- 1,019
16
votes
7
answers
38k
views
Is a longer WiFi password more secure?
Today I had to type the same password to connect to a WPA2-secured WiFi network several times, and got really annoyed with the length of the password. Especially since it is just a phrase repeated ...
- 263
15
votes
2
answers
5k
views
Would an unnecessarily long password degrade performance of a WPA2 wireless network?
My friend wants to keep his home network super-secure, due to some trouble that he's had with unwelcome Wi-Fi intruders. So, naturally, he devised an ultra-long WPA2 passphrase (on the order of 100+ ...
- 253
15
votes
2
answers
27k
views
Is it possible to use the aircrack-ng tool to crack a WPA2 Enterprise network?
is this tool (aircrack-ng) capable of cracking into a WPA/WPA2 Enterprise network? This tool has major success cracking the passwords of WEP/WPA networks.
If it can, how, but if not, is there another ...
- 253
15
votes
3
answers
10k
views
How does FaceNiff work?
FaceNiff is an Android app that sniffs Facebook session ids. You must be connected to the same WiFi as the victim. It is said to be working even when WPA2 is present. How is it possible? I can decrypt ...
- 245
15
votes
3
answers
14k
views
What is the purpose of changing the default SSID?
Yesterday I got a cable modem, and on the back of the modem there is a small sticker with the name of the default SSID, which looks like Vendor-A11 and the default Pre-Shared Key, which is a long ...
- 285
13
votes
3
answers
10k
views
If WPA2-PSK is insecure, what other options do home users have?
from what I'm reading online it seems that one can land attacks and successfully crack a WPA2-PSK wifi network, is that true and if it is, how home users can secure their networks? I seen an ...
- 233
13
votes
3
answers
76k
views
What is "anonymous identity" in enterprise WPA?
When connecting to an enterprise WPA protected network, I have the option the add an "anonymous identity" (see related screenshot). I don't understand what's the point though.
Who get to see this ...
- 233
13
votes
2
answers
16k
views
WPA2 Enterprise AES encryption key size?
I have recently set up a RADIUS server with EAP for my wireless router, however, I have some questions about the key size and how WPA2 enterprise (AES) works in general.
I have read that in ...
Dan
12
votes
3
answers
6k
views
Encrypt WiFi connection per connected user
One of the questions that comes on quite often is about WiFi encryption.
Now imagine that you have multiple users connecting to one AP. With a simple WPA2 protection setup they can still sniff each ...
- 54.4k
12
votes
2
answers
5k
views
Does WPA2 Enterprise mitigate evil twin attacks?
One of the dangers of using WPA2-PSK is the possibility that an attacker may setup another wireless network with the same SSID and even use the same access point MAC address via MAC spoofing. The ...
- 6,753
11
votes
9
answers
93k
views
Wifi penetration testing: Why aireplay-ng de-authentication does not work?
I am trying to pentest the security of the password of my wireless network. It is a WPA2 with pre-shared-keys. My current computer is connected to the wifi router and I try to de-auth my own machine.
...
- 513
11
votes
2
answers
2k
views
WPA3 announced. Really needed?
It seems Wi-Fi Alliance announced WPA3 for the end of 2018.
Anybody knows exactly what is new? features, security improvements, etc...
Is it because of Krack attack? I thought patching WPA2 is enough....
- 5,245
11
votes
5
answers
1k
views
My ISP shows my WiFi password on their public site in plain text. Should I be worried?
I recently noticed that when logged into my ISPs (Spectrum) public, external site that can be accessed outside my network, I can see my home network's WPA2 password in plain text.
This clearly means ...
10
votes
5
answers
4k
views
How can an access point spoof me into connecting?
I was reading through the answers of the question "How can I ensure that I connect to the right wireless Access Point?" and was wondering how it is possible for an access point to imitate another wifi ...
- 1,391
10
votes
1
answer
6k
views
Wifi encryption vs SSL encryption
I am a bit confused about two types of data encryption when I am connected to a wifi.
The first encryption is used as a part of the wifi connection. The technologies used are wep, wpa, wpa2.
The ...
- 205
10
votes
2
answers
1k
views
Krack attack(er) sees which traffic?
I am trying understand one thing about the KRACK attack. I see explanations like this everywhere:
The hacker interferes with the initial handshake between your device and the
WiFi router in ...
- 253
9
votes
2
answers
42k
views
How long would it take to brute force an 11 character single-case alphanumeric password?
My previous home wifi router's WPA2 password was permanently fixed to FZ4HBCKHGC8.
How long would it take to crack via brute force?
Or more pragmatically:
How long would it take to exhaust all ...
- 1,769
9
votes
2
answers
10k
views
Why does a deauth attack work on WPA2 despite encryption?
Given that WiFi packets should be encrypted if WPA2 is used, why is it that a deauth attack can be successful? Shouldn't the machine know that the message is illegitimate due to the fact that it would ...
- 435
9
votes
1
answer
20k
views
Why is a CA certificate required for EAP-TLS clients?
When setting up clients with WPA2 EAP-TLS, most clients (ie: my phone, my computer) require both a client public/private keypair (for obvious reasons) and a certificate authority certificate.
It's ...
- 6,753
9
votes
1
answer
9k
views
Practical attacks against WPA2
Maybe a duplicate: Bruteforce on 10 characters length WPA2 password
So I am trying to get into home network security for the fun of it. More concretely, I am trying to reproduce the scenario of ...
- 1,917
9
votes
1
answer
2k
views
Are networks using EAP-TLS affected by Heartbleed?
Does the Heartbleed bug affect WiFi networks secured by WPA2-EAP in TLS mode? Since it's using TLS to secure connections between the server and clients, is it possible to attack the server using the ...
- 6,753
9
votes
1
answer
2k
views
Mitigating the new attack on WPA2 involving PMKID
A new attack was discovered which allows cracking a WPA2 passphrase without needing to capture the 4-way handshake. While this doesn't weaken the password itself, it does mean that an attacker can ...
- 66.5k
9
votes
1
answer
660
views
Consequences of the WPA2 KRACK attack on older Windows and iOS clients
What are the real-world consequences of the WPA2 KRACK attacks on older Windows systems (XP/Vista) and iOS devices (10 and older) that will not be patched?
I am aware of another question on this site ...
- 252
9
votes
2
answers
907
views
wireless security - Authentication and Association
I am trying to learn wireless security a bit more technically but resources out there on the net are so confusing. Here is my understanding.
There are two types of Authentication:
1) Open System ...
- 213
8
votes
5
answers
12k
views
Does using WPA2-Enterprise just change the attack model vs WPA2-PSK?
As far as I can tell based on the reading I've done so far, WPA2-Enterprise uses the same encryption and security algorithms and methods as WPA2-PSK, with the addition of using another service for ...
- 6,753
8
votes
3
answers
6k
views
How do WPA/WPA2 cracking programs know when the PMK/PTK is correct?
I'm doing some pen-testing on my home wlan with aircrack-ng and it got me wondering how programs like these(eg. aircrack-ng, cowPatty, pyrit etc) really work. Specially, when performing a dictionary-...
- 189
8
votes
1
answer
13k
views
Wireshark can't decrypt WPA2 LAN traffic
I want to decrypt my own network traffic.
I have Linux Mint on Samsung Laptop with a AR542x Wireless Network Adapter.
Open Wireshark, start capture in promiscuous mode & monitor mode and I ...
user135023
8
votes
1
answer
36k
views
Rainbow tables/hash tables versus WPA/WPA2
In Wi-Fi penetration testing, is it possible to use rainbow tables/hash tables on WPA/WPA2 networks?
Is there an advantage of one over the other?
...
- 323