42
votes
What is stronger - WPA2 Enterprise with 2048 bit key, or Personal with 63 character passphrase?
Security from exhaustive search
Ignoring the benefits and drawbacks of each protocol and focusing exclusively on the difficulty of a brute force attack, the answer is that they are both identical. The ...
- 64k
32
votes
Accepted
How is attacking WPA different from attacking WPA2?
WPA was just a quick update to WEP protocol to solve some security problems until the final version of 802.11i standard was delivered.
The message integrity check, per-packet key hashing, broadcast ...
- 531
8
votes
Accepted
Is it possible for an 802.1x network (PEAP/MSCHAPv2) to have no certificate?
Is it possible for an 802.1x network (PEAP/MSCHAPv2) to have no certificate (CA, user, or otherwise)?
PEAP/MSCHAPv2 doesn't typically use client certificates, nor does it directly use any CA ...
- 3,927
6
votes
How is attacking WPA different from attacking WPA2?
The authentication mechanism is same, but the difference between WPA and WPA2 is the encryption protocol used.
WPA uses the TKIP protocol while WPA2 introduces support for the CCMP protocol.
And it'...
- 2,485
4
votes
Does WPA PSK/Personal break PMK?
The PMK is used the same after generation, however they are generated very differently. With WPA-PSK the PMK is generated from the PSK, fundamentally if one knows the PSK one can access the network. ...
- 2,043
3
votes
Accepted
Is is possible to decrypt 802.11 for WPA enterprise?
The methodology I've always seen for this involves using Hostapd in a man in the middle style attack. Essentially setting up an Evil Twin style attack on the enterprise network, failing but still ...
- 2,787
2
votes
Accepted
Online banking on wpa & wpa2 enterprise
Because the actual connection to the bank is probably secured with TLS (https), which is mandatory in most legislations for banks now, it does not depend on the authentication and encryption of the ...
- 14.3k
2
votes
Accepted
Will WPA Enterprise give any advantage on home network with one user?
The main benefit of WPA Enterprise is that it uses a radius server for authentication, which allows you more control on a per user basis.
Each user gets their own key to secure their connection. ...
- 5,090
2
votes
Accepted
How do enterprises deal with SSO and Google backing up WiFi credentials?
Single Sign On in a company means that you have one set of credentials for all the services the company uses
That is not correct.
Single signon means an employee only has to sign on once, with a ...
- 9,061
2
votes
How to protect against MAC spoofing in WiFi network?
You cannot prevent the user from changing their MAC address. The MAC address is provided by the client and can be changed at any time assuming their hardware allows them to do so. If you are relying ...
- 6,705
1
vote
Under what circumstances can WPA be cracked?
It is susceptible to KRACK Attack. KRACK is attack is Key reinstallation attack. WPA2 also susceptible 2 KRACK attack. WPA based on LEAP or TKIP and it use single passphrase for authentication. It is ...
- 658
1
vote
How does the EAP-TLS handshake work, exactly?
In EAP-TLS, the peer (supplicant) and the authenticator do a TLS handshake. In practice, the authenticator usually relays the EAP mesages to an authentication (RADIUS) server which means that the TLS ...
- 771
1
vote
Accepted
Capturing cleartext authentication (EAP-TTLS/PAP) with WPA-2 Enterprise?
My knowledge on wireless communication is limited, but is it possible to force a client to connect to EAP-TTLS/PAP or is this controlled by the client or through client profiles?
Or a better ...
- 3,927
1
vote
Online banking on wpa & wpa2 enterprise
The banking website should have an HTTPS (secure SSL) link over which you are logging in. This HTTPS link creates end-to-end encryption between the banking server and your browser. In addition, you ...
- 1,356
1
vote
Accepted
Which key is actually used for encrypting data traffic in WPA after the 4WHS?
It is the PTK used for data transfer, it is derived from the PMK (PSK).
If the PMK is compromised (You get to know the passphrase/password) all you can get is the Broadcasts packets, because you can ...
- 1,116
1
vote
Accepted
Are there any exploitable protocol flaws in WPA Enterprise?
Shouldn't there be a certificate warning on the phone?
There should be a warning but this depends on the client side implementation.
For example in europe there is a academia wide wireless network ...
- 4,275
1
vote
Attacking WPA/WPA2 ; Clarification on deauthentication packets
Only one four way authentication exchange is required. You can either wait for it or send a single deauth pack to a connected client so that it would re initiate the connection. The reason why they ...
- 3,851
1
vote
How to provide user friendly WiFi access to gym members with WPA2 Enterprise?
You could develop a profile which contains the network key, as far as i am aware this means that the key isnt viewable by the user. This could be downloadable from the gyms website member area.
Maybe ...
- 39
1
vote
What auth info is locally revealed with eduroam WPA-Enterprise 802.1X?
Eduroam's RADIUS configuration creates a TLS-secured tunnel between your device and your home RADIUS server for the RADIUS Access Challenge.
While the local institution's RADIUS server will see who ...
- 1,331
Only top scored, non community-wiki answers of a minimum length are eligible