Re: WPA/WEP key discovery time
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


sci.crypt archive

Re: WPA/WEP key discovery time

From: Unruh <unruh-spam@physics.ubc.ca>
Date: Fri Mar 31 2006 - 19:20:06 CEST

"Joseph Ashwood" <ashwood@msn.com> writes:

>"Richard Revis" <richard.revis@baesystems.cREMOVEm> wrote in message
>news:442b80b1$1_1@glkas0286.greenlnk.net...
>> Good morning. I'm looking for some hints about where to start looking to
>> determine how often to cycle the keys used in a WEP and WPA installation.

>If the WEP locked down so that only the specific necessary system can use
>it? If so then what is the value of compromising the WEPd network? Of one
>gains nothing from the attack, then WEP is probably enough. Regardless of
>how broken it is, you'd be basically running WEP as a courtesy, telling the
>attackers "You don't want to be here." I run the wireless network in my
>apartment on the same principal (the only thing accessible is the wrong side
>of a VPN server), yes I've had the WEP key broken a few times, and I get a
>few spurious connection attempts per day, but nothing to worry about.

The OP obviously is in a business where they value their data and their
security. While your home system would not really matter much to an
attacker, his may well cost the company billions of dollars if it is
comprimised. Thus while WEP may be good enough for your home system, it
almost certainly is not good enough when you are trying to protect
sensitive information.

> Joe
Received on Mon May 1 01:54:13 2006