Slashdot Mirror
WPA Encryption Cracked In 60 Seconds
carusoj writes "Computer scientists in Japan say they've developed a way to break the WPA encryption system used in wireless routers in about one minute. Last November, security researchers first showed how WPA could be broken, but the Japanese researchers have taken the attack to a new level. The earlier attack worked on a smaller range of WPA devices and took between 12 and 15 minutes to work. Both attacks work only on WPA systems that use the Temporal Key Integrity Protocol (TKIP) algorithm. They do not work on newer WPA 2 devices or on WPA systems that use the stronger Advanced Encryption Standard (AES) algorithm."
You'll be able to provide more free wireless too!
Lucky for me, I use WEP, so I'm safe.
This list is still accurate, if you apply the comment on #4 up to #5 as well.
And run DD-WRT.
"Sacrifice for the good of The State" - The State
It's probably not so much a matter of what base crypto they're using (a la AES, SHA, etc) but how they're implementing the key exchange when negotiating the connection. Implement good crypto wrong and you open the door. Initial negotiations between parties is a tricky, multistep affair for good security, to prevent MITM.
I work for the Department of Redundancy Department.
Wired ethernet. Not only is it vastly more secure, it's also an order of magnitude or two faster than wireless.
Game! - Where the stick is mightier than the sword!
No wireless? Lame.
Faster! Faster! Faster would be better!
And the most important piece of information comes at the very end of the summary (just not to diminish the sensation or prevent FUD):
They do not work on newer WPA 2 devices or on WPA systems that use the stronger Advanced Encryption Standard (AES) algorithm.
They have just found a way to decrypt a packet using the WEP chopchop algorithm. Master key can't still be recovered. Move along, this isn't news
Linux forever
I don't know why people insist on using WEP, WPA, WPA2, etc..
I just made my SSID "Logon for only $3.99 per minute"
Haven't ever seen my neighbors log on even once.
_
Ah - the "If you want to outrun a bear, the key is not to outrun the bear - it's to outrun the person behind you" principle. That sort of wisdom ranks up there with, "Women are like square roots - if they're under 16, you should do them in your head."
Take that however you will.