Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.
42 votes

What is stronger - WPA2 Enterprise with 2048 bit key, or Personal with 63 character passphrase?

Security from exhaustive search Ignoring the benefits and drawbacks of each protocol and focusing exclusively on the difficulty of a brute force attack, the answer is that they are both identical. The ...
user avatar
  • 64k
32 votes
Accepted

How is attacking WPA different from attacking WPA2?

WPA was just a quick update to WEP protocol to solve some security problems until the final version of 802.11i standard was delivered. The message integrity check, per-packet key hashing, broadcast ...
user avatar
  • 531
8 votes
Accepted

Is it possible for an 802.1x network (PEAP/MSCHAPv2) to have no certificate?

Is it possible for an 802.1x network (PEAP/MSCHAPv2) to have no certificate (CA, user, or otherwise)? PEAP/MSCHAPv2 doesn't typically use client certificates, nor does it directly use any CA ...
user avatar
  • 3,927
6 votes

How is attacking WPA different from attacking WPA2?

The authentication mechanism is same, but the difference between WPA and WPA2 is the encryption protocol used. WPA uses the TKIP protocol while WPA2 introduces support for the CCMP protocol. And it'...
user avatar
  • 2,485
4 votes

Does WPA PSK/Personal break PMK?

The PMK is used the same after generation, however they are generated very differently. With WPA-PSK the PMK is generated from the PSK, fundamentally if one knows the PSK one can access the network. ...
user avatar
  • 2,043
3 votes
Accepted

Is is possible to decrypt 802.11 for WPA enterprise?

The methodology I've always seen for this involves using Hostapd in a man in the middle style attack. Essentially setting up an Evil Twin style attack on the enterprise network, failing but still ...
user avatar
  • 2,787
2 votes
Accepted

Online banking on wpa & wpa2 enterprise

Because the actual connection to the bank is probably secured with TLS (https), which is mandatory in most legislations for banks now, it does not depend on the authentication and encryption of the ...
user avatar
  • 14.3k
2 votes
Accepted

Will WPA Enterprise give any advantage on home network with one user?

The main benefit of WPA Enterprise is that it uses a radius server for authentication, which allows you more control on a per user basis. Each user gets their own key to secure their connection. ...
user avatar
  • 5,090
2 votes
Accepted

How do enterprises deal with SSO and Google backing up WiFi credentials?

Single Sign On in a company means that you have one set of credentials for all the services the company uses That is not correct. Single signon means an employee only has to sign on once, with a ...
user avatar
  • 9,061
2 votes

How to protect against MAC spoofing in WiFi network?

You cannot prevent the user from changing their MAC address. The MAC address is provided by the client and can be changed at any time assuming their hardware allows them to do so. If you are relying ...
user avatar
  • 6,705
1 vote

Under what circumstances can WPA be cracked?

It is susceptible to KRACK Attack. KRACK is attack is Key reinstallation attack. WPA2 also susceptible 2 KRACK attack. WPA based on LEAP or TKIP and it use single passphrase for authentication. It is ...
user avatar
  • 658
1 vote

How does the EAP-TLS handshake work, exactly?

In EAP-TLS, the peer (supplicant) and the authenticator do a TLS handshake. In practice, the authenticator usually relays the EAP mesages to an authentication (RADIUS) server which means that the TLS ...
user avatar
  • 771
1 vote
Accepted

Capturing cleartext authentication (EAP-TTLS/PAP) with WPA-2 Enterprise?

My knowledge on wireless communication is limited, but is it possible to force a client to connect to EAP-TTLS/PAP or is this controlled by the client or through client profiles? Or a better ...
user avatar
  • 3,927
1 vote

Online banking on wpa & wpa2 enterprise

The banking website should have an HTTPS (secure SSL) link over which you are logging in. This HTTPS link creates end-to-end encryption between the banking server and your browser. In addition, you ...
user avatar
  • 1,356
1 vote
Accepted

Which key is actually used for encrypting data traffic in WPA after the 4WHS?

It is the PTK used for data transfer, it is derived from the PMK (PSK). If the PMK is compromised (You get to know the passphrase/password) all you can get is the Broadcasts packets, because you can ...
user avatar
  • 1,116
1 vote
Accepted

Are there any exploitable protocol flaws in WPA Enterprise?

Shouldn't there be a certificate warning on the phone? There should be a warning but this depends on the client side implementation. For example in europe there is a academia wide wireless network ...
user avatar
  • 4,275
1 vote

Attacking WPA/WPA2 ; Clarification on deauthentication packets

Only one four way authentication exchange is required. You can either wait for it or send a single deauth pack to a connected client so that it would re initiate the connection. The reason why they ...
user avatar
  • 3,851
1 vote

How to provide user friendly WiFi access to gym members with WPA2 Enterprise?

You could develop a profile which contains the network key, as far as i am aware this means that the key isnt viewable by the user. This could be downloadable from the gyms website member area. Maybe ...
user avatar
  • 39
1 vote

What auth info is locally revealed with eduroam WPA-Enterprise 802.1X?

Eduroam's RADIUS configuration creates a TLS-secured tunnel between your device and your home RADIUS server for the RADIUS Access Challenge. While the local institution's RADIUS server will see who ...
user avatar
  • 1,331

Only top scored, non community-wiki answers of a minimum length are eligible