8.17 We implemented an attack against WEP, the link-layer security
protocol for 802.11 networks. The attack was described in a
recent paper by Fluhrer, Mantin, and Shamir. With our
implementation, and permission of the network administrator, we
were able to recover the 128 bit secret key used in a production
network, with a passive attack. The WEP standard uses RC4 IVs
improperly, and the attack exploits this design failure. This
paper describes the attack, how we implemented it, and some
optimizations to make the attack more efficient. We conclude that
802.11 WEP is totally insecure, and we provide some
recommendations.
(http://www.cs.rice.edu/~astubble/wep/wep_attack.html
- thoughts?
\_ I found that original paper a couple of weeks ago. My thought
is the obvious one: WEP is completely insecure, and to a
passive attack. - mikeym
\_ My thought is that the pheds will probably throw you in jail
for violating the DMCA. |