WEP: Dead Again, Part 1

thaught you guys might like this.

WEP: Dead Again, Part 1

Quote:

---

Introduction
This article is the first of a two-part series that looks at the new generation of WEP cracking tools for WiFi networks, which offer dramatically faster speeds for penetration testers over the previous generation of tools. In many cases, a WEP key can be determined in seconds or minutes. Part one, below, compares the latest KoreK based tools that perform passive statistical analysis and brute-force cracking on a sample of collected WEP traffic. Next time, in part two, we'll look at active attack vectors, including a method to dramatically increase the rate of packet collection to make statistical attacks even more potent.

---

source http://securityfocus.com/infocus/1814

What is the use of WEP?I heard that term when configuring wireless connections.

WEP is a method of encrypting wireless traffic.

The weakness is in the implementation, and provided you have a large enough sample of packets, the key can be retrieved in under a minute. Assuming you have 5-6 million packets captured.

If they crack the WEP,what good does it do?

Quote:

---

Originally posted here by voltagirl
If they crack the WEP,what good does it do?

---

the point is that you have protection on your network also you should hange it every once in a wile to help keep it secure. Wep also help because most of the time if some one is just looking for a network to access they will just rule out a encrypted one because their are so many unencrypted ones which should not be but it is.

Quote:

---

Originally posted here by voltagirl
If they crack the WEP,what good does it do?

---

If they crack the WEP what good does it do, hehe nice. They can only get free internet and get your credit card info and other financial doc's etc. Noone's worried about their credit card info being brought to public anyways ;)

WEP is just an extra step for would be hackers. Makes a lot of wardrivers move on (unless you are a business, then they may well take the time to crack it.) It takes a couple hours to crack so if someones just looking for an anon wap they will move on until they find a completely unsecured one (which seem to be more common that secure ones)

Quote:

---

Originally posted here by Winston

The weakness is in the implementation, and provided you have a large enough sample of packets, the key can be retrieved in under a minute. Assuming you have 5-6 million packets captured.

---

The point of the article is that 5 or 6 million packets is no longer necessary. That is the number required by airsnort to generate the few thousand packets with weak IVs. With aircrack, only a few hundred thousand packets are needed, and they need only have unique IVs, which are far easier to come by. In other words, the time to crack a key just got much, much lower. This not only affects large companies with a lot of traffic, it also opens up home users (low traffic) to much easier attacks.

Being a home wireless user, to protect myself I was thinking that I can simply alternate a list of passwords. Would this be a good method to stop crackers?

Rotating the passwords is a good start, but you should also consider MAC address filtering, to prevent unauthroized computers from connecting to your network.

The newer access points allow WPA, which is a more secure encryption standard than WEP.

Quote:

---

Originally posted here by Timmy77
Rotating the passwords is a good start, but you should also consider MAC address filtering, to prevent unauthroized computers from connecting to your network.

The newer access points allow WPA, which is a more secure encryption standard than WEP.

---

MAC address filtering is a good idea, but it's easier to spoof a mac than crack a wep key. All anyone has to do is fire up kismet, sniff a client, then issue one ifconfig command to change their mac address to one they want to be. The best solution is to take many different approaches, most (if not all) of which are outlined in posts on this site (one is a wireless security tut) and elsewhere on the web. WPA will be much better.

I am told WEP is easily cracked using airsnort, better use WPA? Is all G routers support WPA, while B routers not?

i would say, when you get your wireless AP, read the manual, and use *all* the security features that the manufacturer offers you. eventhough it's crackable, use WEP anyways and max out the key sizes.

All 802.1x devices could potentially use WPA. The reason being that it uses the same encryption algorithm as WEP, which is RC4. WPA uses a much better implementation of RC4 which is why it is more secure. It is just up to the manufacturer of the device to release a firmware update that allows for WPA to be utilized.

The other thing that WPA does is that it changes the key for every frame, where as with WEP you have the same key until you change it. In WPA this is known as TKIP, Temporal Key Integrity Protocol. There is then a global key which can also be managed through the AP that helps synchronize all of the individual frame key changes. In WEP you have to manually change the key on the AP and all of your nodes. WPA does away with that.

Then there is 802.11i which does require additional hardware as it uses the AES encryption algorithm which requires a seperate math co-proc in order to handle the addiditional load put on an AP by having to deal with the AES encryption. Some people are calling 802.11i WPA2 as WPA and 802.11i are extremely similiar other than the use of a better encryption algorithm in 802.11i.

Bottom line, if you are a home user you are probably fine with WEP. Just make sure that you don't send any sensitive data in clear text. If all you do is connect to your bank or say Amazon.com you should be fine as your browser encrypts those sessions. Make sure that you are not broadcasting your SSID, and change your WEP key atleast once every week or two depending on how much data you send over your wireless network. If you use your wireless network heavily, more frequent key changes are needed.

If you are a business I would never send any type of sensitive information over a WEP enabled network unless that data is encrypted using something external like blowfish, pgp, etc... If you want to send sensitive data without having to use an external form of encryption WPA is definitely the way to go.

If you are a government person or handling extremely sensitive data use 802.11i exclusively as it is the only form of wireless encryption that meets the US government standards for data encryption.

I have tried cracking my wap wep key using my laptop and haven't been able to. I don't think it's as easy as everyone says. Sure it can probably be done but if you worried about war drivers and people sitting in your parking lot I think wep would probably work fine. It's those hardcore people that sit out in the parking lot for a couple days that I would be worried about then WPA i think is very wise to use plus it's very easy to use with windows xp systems.