Wednesday, September 23, 2009

New Attacks on WPA - Move Calmly Toward the Exits


On September the information about attack against the WPA was shown in the Internet.  Deeping into the history we can recall that TKIP (Temporary Key Integrity Protocol) also known as WPA (WiFi Protected Access) was intended to replace WEP.  At this time the WEP was cracked and new wireless security mechanism was needed.   By truth, the WPA has never been intended as a long-term security solution, but only as an interim. Although CCMP is a better security solution for Wi-Fi, it requires additional on-board electronics to allow intensive processing to occur without degradation of the data transfer rates, that’s why WPA and even WEP are still used nowadays. Anyway, the most interest part of the attack on WPA is that intruder can use known vulnerabilities.  According to the published information, attacks are not intended to recover the encryption keys or to reveal the private data contained within TKIP protected frames, they focus on known weaknesses in the Michael integrity check algorithm, which could enable an attacker to insert customized test packets into a LAN from the wireless side in order to probe for traditional wired-side vulnerabilities.  The mentioned above attack has clearly shown the importance of “big step” from WEP and WPA to CCMP.  Hopefully, all technical matters will be resolved soon and using the CCMP instead of TKIP or WEP will become common practice.


Original article:
http://www.cwnp.com/community/articles/new_attacks_on_wpa_-_move_calmly_toward_the_exits.html

No comments:

Post a Comment