ameblo.over-update.download

1. Wep Key Crack Generator
2. Wep Key Generator Online

Contents

Lost Wireless Encryption Key Generator WEP Key. WEP Key Converter. 128 bit key: Hot Wi Fi Links! Wi-Fi is short for wireless fidelity- used generically when referring of any type of 802.11 network, including 802.11b, 802.11a, and 802.11g. It is a trade term promulgated by the Wireless Ethernet Compatibility Alliance (WECA).

Introduction

This document provides methods to configure Wired Equivalent Privacy (WEP) on Cisco Aironet Wireless LAN (WLAN) components.

Note: Refer to the Static Web Keys section of Chapter 6 - Configuring WLANs for more information on WEP configuration on wireless LAN controllers (WLCs).

WEP is the encryption algorithm built into the 802.11 (Wi-Fi) standard. WEP encryption uses the Ron's Code 4 (RC4) Stream Cipher with 40- or 104-bit keys and a 24-bit initialization vector (IV).

As the standard specifies, WEP uses the RC4 algorithm with a 40-bit or 104-bit key and a 24-bit IV. RC4 is a symmetric algorithm because it uses the same key for the encryption and the decryption of data. When WEP is enabled, each radio 'station' has a key. The key is used to scramble the data before transmission of the data through the airwaves. If a station receives a packet that is not scrambled with the appropriate key, the packet is discarded and never delivered to the host.

WEP can be primarily used for a home office or a small office that does not require very strong security.

Aironet WEP implementation is in the hardware. Therefore, minimal performance impact results when you use WEP.

Note: There are some known issues with WEP, which makes it not a strong encryption method. The issues are:

• There is a great deal of administrative overhead to maintain a shared WEP key.

• WEP has the same problem as all systems based on shared keys. Any secret given to one person becomes public after a period of time.

• The IV that seeds the WEP algorithm is sent in clear text.

• The WEP checksum is linear and predictable.

Temporal Key Integrity Protocol (TKIP) has been created to address these WEP issues. Similar to WEP, TKIP uses RC4 encryption. However, TKIP enhances WEP by adding measures such as per-packet key hashing, Message Integrity Check (MIC), and Broadcast key rotation to address known vulnerabilities of WEP. TKIP uses RC4 stream cipher with 128-bit keys for encryption and 64-bit keys for authentication.

Prerequisites

Requirements

This document assumes that you can make an administrative connection to the WLAN devices and that the devices function normally in an unencrypted environment.

In order to configure standard 40-bit WEP, you must have two or more radio units that communicate with each other.

Note: The Aironet products can establish 40-bit WEP connections with IEEE 802.11b-compliant non-Cisco products. This document does not address the configuration of other devices.

For the creation of a 128-bit WEP link, Cisco products only interact with other Cisco products.

Components Used

Use these components with this document:

• Two or more radio units that communicate with each other

• An administrative connection to the WLAN device

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.

Conventions

Refer to Cisco Technical Tips Conventions for more information on document conventions.

Configure WEP on Aironet Access Points

Aironet Access Points That Run VxWorks Operating System

Complete these steps:

1. Make a connection to the Access Point (AP).

2. Navigate to the AP Radio Encryption menu.

   Use one of these paths:

   • Summary Status > Setup > AP Radio/Hardware > Radio Data Encryption (WEP) > AP Radio Data Encryption

   • Summary Status > Setup > Security > Security Setup: Radio Data Encryption (WEP) > AP Radio Data Encryption

   Note: In order to make changes to this page, you must be an administrator with Identity and Write capabilities.

   Web Browser View of the AP Radio Data Encryption Menu

VxWorks Settings

The AP Radio Data Encryption page presents a variety of options to use. Some options are mandatory for WEP. This section notes these mandatory options. Other options are not necessary for WEP to function, but they are recommended.

• Use of Data Encryption by Stations is:

  Use this setting in order to choose whether clients must use data encryption when they communicate with the AP. The pull-down menu lists three options:

  • No Encryption (default)—Requires clients to communicate with the AP without any data encryption. This setting is not recommended.

  • Optional—Allows clients to communicate with the AP either with or without data encryption. Typically, you use this option when you have client devices that cannot make a WEP connection, such as non-Cisco clients in a 128-bit WEP environment.

  • Full Encryption (RECOMMENDED)—Requires clients to use data encryption when they communicate with the AP. Clients who do not use data encryption are not allowed to communicate. This option is recommended if you wish to maximize the security of your WLAN.

    Universal key generator all softwares. Mar 15, 2019  Universal Keygen Generator 2019 For All Software Universal Keygen Generator 2019 is an amazing tool or keygen with the help of it you can generate a activation serial key for any software.It use very simple, It will take few second, you just have to select the software for which you want serial key. Jul 22, 2019  Universal Keygen Generator is the best activator that is the only way to work with product keys and serial keys to activate the unregistered software.It supports all Operating systems. Universal Keygen Generator Online allows you to generate the serial numbers or product keys for all software.you can easily generate a serial key for any version and any software. It is a perfect software for beginners. But here comes a software that helps in generation of serial keys for applications. The software in question is universal Keygen generator. Features of Universal Keygen Generator. Works with any operating system: just as the name implies, “Universal Keygen Generator”, it can function on any type of operating system. Since it can unlock program of any kind, it, therefore, works anywhere.

  Note: You must set a WEP key before you enable encryption use. See the Encryption Key (MANDATORY) section of this list.

• Accept Authentication Types

  You can choose Open, Shared Key, or both of these options in order to set the authentications that the AP will recognize.

  • Open (RECOMMENDED)—This default setting allows any device, regardless of its WEP keys, to authenticate and attempt to associate.

  • Shared Key—This setting tells the AP to send a plain-text, shared key query to any device that attempts to associate with the AP.

    Note: This query can leave the AP open to a known-text attack from intruders. Therefore, this setting is not as secure as the Open setting.

• Transmit With Key

  These buttons allow you to select the key that the AP uses during data transmission. You can select only one key at a time. Any or all of the set keys can be used to receive data. You must set the key before you specify it as the Transmit Key.

• Encryption Key (MANDATORY)

  These fields allow you to enter the WEP keys. Enter 10 hexadecimal digits for 40-bit WEP keys or 26 hexadecimal digits for 128-bit WEP keys. The keys can be any combination of these digits:

  • 0 to 9

  • a to f

  • A to F

  In order to protect WEP key security, existing WEP keys do not appear in plain text in the entry fields. In recent versions of APs, you can delete existing keys. However, you cannot edit the existing keys.

  Note: You must set up the WEP keys for your network, APs, and client devices in exactly the same way. For example, if you set WEP Key 3 on your AP to 0987654321 and select this key as the active key, you must also set WEP Key 3 on the client device to the same value.

• Key Size (MANDATORY)

  This setting sets the keys to either 40-bit or 128-bit WEP. If 'not set' appears for this selection, the key is not set.

  Note: You cannot delete a key by selecting 'not set'.

• Action Buttons

  Four action buttons control settings. If JavaScript is enabled on your web browser, a confirmation popup window appears after you click any button, except Cancel.

  • Apply—This button activates the new value settings. The browser remains on the page.

  • OK—This button applies the new settings and moves the browser back to the main Setup page.

  • Cancel—This button cancels setting changes and returns the settings to the previously stored values. You then return to the main Setup page.

  • Restore Defaults—This button changes all settings on this page back to the factory default settings.

Note: In recent Cisco IOS® versions of APs, only the Apply and Cancel control buttons are available for this page.

Aironet APs That Run Cisco IOS Software

Complete these steps:

1. Make a connection to the AP.

2. From the SECURITY menu option on the left side of the window, choose Encryption Manager for the radio interface to which you want to configure your static WEP keys.

   Web Browser View of the AP Security Encryption Manager Menu

Configure Aironet Bridges

If you use VxWorks, complete these steps:

1. Make a connection to the Bridge.

2. Navigate to the Privacy menu.

   Choose Main Menu > Configuration > Radio > I80211 > Privacy.

   The Privacy menu controls the use of encryption on the data packet that is transmitted over the air by the radios. The RSA RC4 algorithm and one of up to four known keys are used to encrypt the packets. Each node in the radio cell must know all the keys in use, but any of the keys can be selected to transmit the data.

   Terminal Emulator View of the Privacy Menu

Refer to Configuring Cipher Suites and WEP - 1300 Series Bridge and Configuring WEP and WEP Features - 1400 Series Bridge for information on how to configure WEP in 1300 and 1400 Series Bridges through CLI mode.

In order to use GUI to configure 1300 and 1400 Series Bridges, complete the same procedure explained in the Aironet APs That Run Cisco IOS Software section of this document.

VxWorks Settings

The Privacy menu presents a set of options that you must configure. Some options are mandatory for WEP. This section notes these mandatory options. Other options are not necessary for WEP to function, but they are recommended.

This section presents the menu options in the order that they appear in the Terminal Emulator View of the Privacy Menu. However, configure the options in this order:

1. Key

2. Transmit

3. Auth

4. Client

5. Encryption

Configuration in this order ensures that necessary preconditions are set up as you configure each setting.

These are the options:

• Key (MANDATORY)

  The Key option programs the encryption keys into the Bridge. You are prompted to set one of the four keys. You are prompted twice to enter the key. In order to define the key, you must enter either 10 or 26 hexadecimal digits, which depends on whether the Bridge configuration is for 40-bit or 128-bit keys. Use any combination of these digits:

  • 0 to 9

  • a to f

  • A to F

  The keys must match in all nodes in the radio cell, and you must enter the keys in the same order. You do not need to define all four keys, as long as the number of keys match in each device in the WLAN.

• Transmit

  The Transmit option tells the radio which keys to use in order to transmit packets. Each radio is able to decrypt received packets that are sent with any of the four keys.

• Auth

  You use the Auth option on repeater bridges in order to determine which authentication mode the unit uses to connect with its parent. The allowed values are Open or Shared Key. The 802.11 protocol specifies a procedure in which a client must authenticate with a parent before the client can associate.

  • Open (RECOMMENDED)—This mode of authentication is essentially a null operation. All clients are allowed to authenticate.

  • Shared Key—This mode allows the parent to send the client a challenge text, which the client encrypts and returns to the parent. If the parent successfully decrypts the challenge text, the client is authenticated.

    Caution: Do not use the Shared Key mode. When you use it, a plain-text and encrypted version of the same data transmits on the air. This does not gain anything. If the user key is wrong, the unit does not decrypt the packets, and the packets cannot gain access to the network.

• Client

  The Client option determines the authentication mode that the client nodes use to associate to the unit. These are the values that are allowed:

  • Open (RECOMMENDED)—This mode of authentication is essentially a null operation. All clients are allowed to authenticate.

  • Shared Key—This mode allows the parent to send the client a challenge text, which the client encrypts and returns to the parent. If the parent successfully decrypts the challenge text, the client is authenticated.

  • Both—This mode allows the client to use either mode.

• Encryption

  • Off— If you set the Encryption option to Off, no encryption is done. Data transmits in the clear.

  • On (MANDATORY)—If you set the Encryption option to On, all transmitted data packets are encrypted and any unencrypted received packets are discarded.

  • Mixed—In the Mixed mode, a root or repeater bridge accepts association from clients that have encryption turned either On or Off. In this case, only data packets between nodes that both support are encrypted. Multicast packets are sent in the clear. All nodes can see the packets.

    Caution: Do not use the Mixed mode. If a client that has encryption enabled sends a multicast packet to its parent, the packet is encrypted. The parent decrypts the packet and retransmits the packet in the clear to the cell, and other nodes can see the packet. The ability to view a packet in both encrypted and unencrypted form can contribute to breaking a key. The inclusion of Mixed mode is only for compatibility with other vendors.

Configure Client Adapters

You must complete two main steps in order to set up WEP on the Aironet Client Adapter:

1. Configure the WEP key/keys in the Client Encryption Manager.

2. Enable WEP in the Aironet Client Utility (ACU).

Set the WEP Keys

Complete these steps in order to set up WEP keys on the client adapters:

1. Open ACU and choose Profile Manager.

2. Choose the profile where you want to enable WEP and click Edit.

3. Click the Network Security tab in order to display the security options, and click Use Static WEP Keys.

   This action activates WEP configuration options that are dimmed when No WEP is selected.

4. For the WEP key that you want to create, choose either 40 bits or 128 bits under WEP Key Size on the right side of the window.

   Note: 128-bit client adapters can use 40-bit or 128-bit keys. But 40-bit adapters can only use 40-bit keys.

   Note: Your client adapter WEP key must match the WEP key that the other WLAN components with which you communicate use.

   When you set more than one WEP key, you must assign the WEP keys to the same WEP key numbers for all devices. WEP keys must be comprised of the hexadecimal characters and must contain 10 characters for 40-bit WEP keys or 26 characters for 128-bit WEP keys. The hexadecimal characters can be:

   • 0 to 9

   • a to f

   • A to F

   Note: ASCII-text WEP keys are not supported on the Aironet APs. Therefore, you must choose the Hexadecimal (0-9, A-F) option if you plan to use your client adapter with these APs.

   Note: After you create the WEP key, you can write over it. But you cannot edit or delete it.

   Note: If you use a later version of Aironet Desktop Utility (ADU) instead of ACU as a client utility, you can also delete the created WEP key and replace it with a new one.

5. Click the Transmit Key button that is beside one of the keys that you created.

   With this action, you indicate that this key is the key that you want to use to transmit packets.

6. Click Persistent under WEP Key Type.

   This action allows your client adapter to retain this WEP key, even when power to the adapter is removed or at reboot of the computer in which the key is installed. If you choose Temporary for this option, the WEP key is lost when power is removed from your client adapter.

7. Click OK.

Enable WEP

Complete these steps:

1. Open ACU and choose Edit Properties from the menu bar.

2. Click the Network Security tab in order to display the security options.

3. Check the Enable WEP check box in order to activate WEP.

Refer to Configuring WEP in ADU for steps to configure WEP using ADU as client utility.

Configure Workgroup Bridges

There are differences between the Aironet 340 Series Workgroup Bridge and the Aironet 340 Series Bridge. However, the configuration of the Workgroup Bridge to use WEP is almost identical to configuration of the Bridge. See the Configure Aironet Bridges section for the configuration of the Bridge.

1. Connect to the Workgroup Bridge.

2. Navigate to the Privacy menu.

   Choose Main > Configuration > Radio > I80211 > Privacy in order to access the Privacy VxWorks menu.

Settings

The Privacy menu presents the settings that this section lists. Configure the options on the Workgroup Bridge in this order:

1. Key

2. Transmit

3. Auth

4. Encryption

These are the options:

• Key

  The Key option establishes the WEP key that the bridge uses in order to receive packets. The value must match the key that the AP or other device with which the Workgroup Bridge communicates uses. The key consists of up to 10 hexadecimal characters for 40-bit encryption or 26 hexadecimal characters for 128-bit encryption. The hexadecimal characters can be any combination of these digits:

  • 0 to 9

  • a to f

  • A to F

• Transmit

  The Transmit option establishes the WEP key that the bridge uses in order to transmit packets. You can elect to use the same key that you used for the Key option. If you choose a different key, you must establish a matching key on the AP.

  Only one WEP key can be used at one time for transmissions. The WEP key that you use to transmit data must be set to the same value on your Workgroup Bridge and other devices with which it communicates.

  Start studying Sport Psychology Final. Learn vocabulary, terms, and more with flashcards, games, and other study tools. Shop the Black Friday Sale: Get 50% off Quizlet Plus through Monday Learn more. Oct 23, 2017  which of the following is being constructed in the image? There are a few different places the money can end up. In the most noble cases, the change is donated to a charity. For example, the fountains in the Mall of America collect roughly $24,000 a year. The two sensations that are emphasized in autogenic training are a. Warmth and cold b. Warmth and heaviness c. Kinesthetic and heaviness d. Warmth and kinesthetic e. Cold and kinesthetic. There are two keys associated with generating good images quizlet. Nov 04, 2014  Meet Eddie Woo, the maths teacher you wish you’d had in high school Australian Story - Duration: 28:09. ABC News In-depth Recommended for you.

• Authentication (Auth)

  The Auth parameter determines which method of authentication the system uses. The options are:

  • Open (RECOMMENDED)—The default Open setting allows any AP, regardless of its WEP settings, to authenticate and then attempt to communicate with the bridge.

  • Shared Key—This setting instructs the bridge to send a plain-text, shared key query to APs in an attempt to communicate with the bridge. The Shared Key setting can leave the bridge open to a known-text attack from intruders. Therefore, this setting is not as secure as the Open setting.

• Encryption

  The Encryption option sets encryption parameters on all data packets, except association packets and some control packets. There are four options:

  Note: The AP must have encryption active and a key set properly.

  • Off—This is the default setting. All encryption is turned off. The Workgroup Bridge does not communicate with an AP with use of WEP.

  • On (RECOMMENDED)—This setting requires the encryption of all data transfers. The Workgroup Bridge only communicates with APs that use WEP.

  • Mixed on—This setting means that the bridge always uses WEP in order to communicate with the AP. However, the AP communicates with all devices, whether they use WEP or do not use WEP.

  • Mixed off—This setting means that the bridge does not use WEP in order to communicate with the AP. However, the AP communicates with all devices, whether they use WEP or do not use WEP.

  Caution: If you select On or Mixed on as the WEP category and you configure the bridge through its radio link, connectivity to the bridge is lost if you set the WEP key incorrectly. Make sure that you use exactly the same settings when you set the WEP key on the Workgroup Bridge and the WEP key on other devices on your WLAN.

Related Information

Wired Equivalent Privacy (WEP) is a security algorithm for IEEE 802.11 wireless networks. Introduced as part of the original 802.11 standard ratified in 1997, its intention was to provide data confidentiality comparable to that of a traditional wired network.^[1] WEP, recognizable by its key of 10 or 26 hexadecimal digits (40 or 104 bits), was at one time widely in use and was often the first security choice presented to users by router configuration tools.^[2][3]

In 2003 the Wi-Fi Alliance announced that WEP had been superseded by Wi-Fi Protected Access (WPA). In 2004, with the ratification of the full 802.11i standard (i.e. WPA2), the IEEE declared that both WEP-40 and WEP-104 have been deprecated.^[4]

WEP was the only encryption protocol available to 802.11a and 802.11b devices built before the WPA standard, which was available for 802.11g devices. However, some 802.11b devices were later provided with firmware or software updates to enable WPA, and newer devices had it built in.^[5]

Wep Key Crack Generator

History[edit]

WEP was ratified as a Wi-Fi security standard in 1999. The first versions of WEP were not particularly strong, even for the time they were released, because U.S. restrictions on the export of various cryptographic technology led to manufacturers restricting their devices to only 64-bit encryption. When the restrictions were lifted, it was increased to 128-bit. Despite the introduction of 256-bit WEP, 128-bit remains one of the most common implementations.^[6]

Encryption details[edit]

WEP was included as the privacy component of the original IEEE 802.11 standard ratified in 1997.^[7][8] WEP uses the stream cipherRC4 for confidentiality,^[9] and the CRC-32 checksum for integrity.^[10] It was deprecated in 2004 and is documented in the current standard.^[11]

Standard 64-bit WEP uses a 40 bit key (also known as WEP-40), which is concatenated with a 24-bit initialization vector (IV) to form the RC4 key. At the time that the original WEP standard was drafted, the U.S. Government's export restrictions on cryptographic technology limited the key size. Once the restrictions were lifted, manufacturers of access points implemented an extended 128-bit WEP protocol using a 104-bit key size (WEP-104).

A 64-bit WEP key is usually entered as a string of 10 hexadecimal (base 16) characters (0–9 and A–F). Each character represents 4 bits, 10 digits of 4 bits each gives 40 bits; adding the 24-bit IV produces the complete 64-bit WEP key (4 bits × 10 + 24 bits IV = 64 bits of WEP key). Most devices also allow the user to enter the key as 5 ASCII characters (0–9, a–z, A–Z), each of which is turned into 8 bits using the character's byte value in ASCII (8 bits × 5 + 24 bits IV = 64 bits of WEP key); however, this restricts each byte to be a printable ASCII character, which is only a small fraction of possible byte values, greatly reducing the space of possible keys.

A 128-bit WEP key is usually entered as a string of 26 hexadecimal characters. 26 digits of 4 bits each gives 104 bits; adding the 24-bit IV produces the complete 128-bit WEP key (4 bits × 26 + 24 bits IV = 128 bits of WEP key). Most devices also allow the user to enter it as 13 ASCII characters (8 bits × 13 + 24 bits IV = 128 bits of WEP key).

A 152-bit and a 256-bit WEP systems are available from some vendors. As with the other WEP variants, 24 bits of that is for the IV, leaving 128 or 232 bits for actual protection. These 128 or 232 bits are typically entered as 32 or 58 hexadecimal characters (4 bits × 32 + 24 bits IV = 152 bits of WEP key, 4 bits × 58 + 24 bits IV = 256 bits of WEP key). Most devices also allow the user to enter it as 16 or 29 ASCII characters (8 bits × 16 + 24 bits IV = 152 bits of WEP key, 8 bits × 29 + 24 bits IV = 256 bits of WEP key).

Authentication[edit]

Two methods of authentication can be used with WEP: Open System authentication and Shared Key authentication.

In Open System authentication, the WLAN client does not provide its credentials to the Access Point during authentication. Any client can authenticate with the Access Point and then attempt to associate. In effect, no authentication occurs. Subsequently, WEP keys can be used for encrypting data frames. At this point, the client must have the correct keys.

In Shared Key authentication, the WEP key is used for authentication in a four-step challenge-response handshake:

1. The client sends an authentication request to the Access Point.
2. The Access Point replies with a clear-text challenge.
3. The client encrypts the challenge-text using the configured WEP key and sends it back in another authentication request.
4. The Access Point decrypts the response. If this matches the challenge text, the Access Point sends back a positive reply.

After the authentication and association, the pre-shared WEP key is also used for encrypting the data frames using RC4.

At first glance, it might seem as though Shared Key authentication is more secure than Open System authentication, since the latter offers no real authentication. However, it is quite the reverse. It is possible to derive the keystream used for the handshake by capturing the challenge frames in Shared Key authentication.^[12] Therefore, data can be more easily intercepted and decrypted with Shared Key authentication than with Open System authentication. If privacy is a primary concern, it is more advisable to use Open System authentication for WEP authentication, rather than Shared Key authentication; however, this also means that any WLAN client can connect to the AP. (Both authentication mechanisms are weak; Shared Key WEP is deprecated in favor of WPA/WPA2.)

Weak security[edit]

Wep Key Generator Online

Because RC4 is a stream cipher, the same traffic key must never be used twice. The purpose of an IV, which is transmitted as plain text, is to prevent any repetition, but a 24-bit IV is not long enough to ensure this on a busy network. The way the IV was used also opened WEP to a related key attack. For a 24-bit IV, there is a 50% probability the same IV will repeat after 5,000 packets.

In August 2001, Scott Fluhrer, Itsik Mantin, and Adi Shamir published a cryptanalysis of WEP^[13] that exploits the way the RC4 ciphers and IV are used in WEP, resulting in a passive attack that can recover the RC4 key after eavesdropping on the network. Depending on the amount of network traffic, and thus the number of packets available for inspection, a successful key recovery could take as little as one minute. If an insufficient number of packets are being sent, there are ways for an attacker to send packets on the network and thereby stimulate reply packets which can then be inspected to find the key. The attack was soon implemented, and automated tools have since been released. It is possible to perform the attack with a personal computer, off-the-shelf hardware and freely available software such as aircrack-ng to crack any WEP key in minutes.

Cam-Winget et al.^[14] surveyed a variety of shortcomings in WEP. They write 'Experiments in the field show that, with proper equipment, it is practical to eavesdrop on WEP-protected networks from distances of a mile or more from the target.' They also reported two generic weaknesses:

• the use of WEP was optional, resulting in many installations never even activating it, and
• by default, WEP relies on a single shared key among users, which leads to practical problems in handling compromises, which often leads to ignoring compromises.

In 2005, a group from the U.S. Federal Bureau of Investigation gave a demonstration where they cracked a WEP-protected network in three minutes using publicly available tools.^[15] Andreas Klein presented another analysis of the RC4 stream cipher. Klein showed that there are more correlations between the RC4 keystream and the key than the ones found by Fluhrer, Mantin and Shamir which can additionally be used to break WEP in WEP-like usage modes.

In 2006, Bittau, Handley, and Lackey showed^[2] that the 802.11 protocol itself can be used against WEP to enable earlier attacks that were previously thought impractical. After eavesdropping a single packet, an attacker can rapidly bootstrap to be able to transmit arbitrary data. The eavesdropped packet can then be decrypted one byte at a time (by transmitting about 128 packets per byte to decrypt) to discover the local network IP addresses. Finally, if the 802.11 network is connected to the Internet, the attacker can use 802.11 fragmentation to replay eavesdropped packets while crafting a new IP header onto them. The access point can then be used to decrypt these packets and relay them on to a buddy on the Internet, allowing real-time decryption of WEP traffic within a minute of eavesdropping the first packet.

In 2007, Erik Tews, Andrei Pychkine, and Ralf-Philipp Weinmann were able to extend Klein's 2005 attack and optimize it for usage against WEP. With the new attack^[16] it is possible to recover a 104-bit WEP key with probability 50% using only 40,000 captured packets. For 60,000 available data packets, the success probability is about 80% and for 85,000 data packets about 95%. Using active techniques like deauth and ARP re-injection, 40,000 packets can be captured in less than one minute under good conditions. The actual computation takes about 3 seconds and 3 MB of main memory on a Pentium-M 1.7 GHz and can additionally be optimized for devices with slower CPUs. The same attack can be used for 40-bit keys with an even higher success probability.

In 2008 the Payment Card Industry (PCI) Security Standards Council updated the Data Security Standard (DSS) to prohibit use of WEP as part of any credit-card processing after 30 June 2010, and prohibit any new system from being installed that uses WEP after 31 March 2009. The use of WEP contributed to the TJ Maxx parent company network invasion.^[17]

Remedies[edit]

Use of encrypted tunneling protocols (e.g. IPSec, Secure Shell) can provide secure data transmission over an insecure network. However, replacements for WEP have been developed with the goal of restoring security to the wireless network itself.

802.11i (WPA and WPA2)[edit]

The recommended solution to WEP security problems is to switch to WPA2. WPA was an intermediate solution for hardware that could not support WPA2. Both WPA and WPA2 are much more secure than WEP.^[18] To add support for WPA or WPA2, some old Wi-Fi access points might need to be replaced or have their firmware upgraded. WPA was designed as an interim software-implementable solution for WEP that could forestall immediate deployment of new hardware.^[19] However, TKIP (the basis of WPA) has reached the end of its designed lifetime, has been partially broken, and had been officially deprecated with the release of the 802.11-2012 standard.^[20]

Implemented non-standard fixes[edit]

WEP2[edit]

This stopgap enhancement to WEP was present in some of the early 802.11i drafts. It was implementable on some (not all) hardware not able to handle WPA or WPA2, and extended both the IV and the key values to 128 bits.^[21] It was hoped to eliminate the duplicate IV deficiency as well as stop brute force key attacks.

After it became clear that the overall WEP algorithm was deficient (and not just the IV and key sizes) and would require even more fixes, both the WEP2 name and original algorithm were dropped. The two extended key lengths remained in what eventually became WPA's TKIP.

WEPplus[edit]

WEPplus, also known as WEP+, is a proprietary enhancement to WEP by Agere Systems (formerly a subsidiary of Lucent Technologies) that enhances WEP security by avoiding 'weak IVs'.^[22] It is only completely effective when WEPplus is used at both ends of the wireless connection. As this cannot easily be enforced, it remains a serious limitation. It also does not necessarily prevent replay attacks, and is ineffective against later statistical attacks that do not rely on weak IVs.^[23]

Dynamic WEP[edit]

Dynamic WEP refers to the combination of 802.1x technology and the Extensible Authentication Protocol. Dynamic WEP changes WEP keys dynamically. It is a vendor-specific feature provided by several vendors such as 3Com.

The dynamic change idea made it into 802.11i as part of TKIP, but not for the actual WEP algorithm.

See also[edit]

References[edit]

1. ^IEEE Standard for Information Technology- Telecommunications and Information Exchange Between Systems-Local and Metropolitan Area Networks-Specific Requirements-Part 11: Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications. IEEE STD 802.11-1997. November 1997. pp. 1–445. doi:10.1109/IEEESTD.1997.85951. ISBN1-55937-935-9.
2. ^ ^abAndrea Bittau; Mark Handley; Joshua Lackey. 'The Final Nail in WEP's Coffin'(PDF). Retrieved 2008-03-16.Cite journal requires journal= (help)
3. ^'Wireless Adoption Leaps Ahead, Advanced Encryption Gains Ground in the Post-WEP Era' (Press release). RSA Security. 2007-06-14. Archived from the original on 2008-02-02. Retrieved 2007-12-28.
4. ^'What is a WEP key?'. Archived from the original on April 17, 2008. Retrieved 2008-03-11. -- See article at the Wayback Machine
5. ^'SolutionBase: 802.11g vs. 802.11b'. techrepublic.com.
6. ^Fitzpatrick, Jason (September 21, 2016). 'The Difference Between WEP, WPA and WAP2 Wi-Fi Passwords'. How to Geek. Retrieved November 2, 2018.
7. ^Harwood, Mike (29 June 2009). 'Securing Wireless Networks'. CompTIA Network+ N10-004 Exam Prep. Pearson IT Certification. p. 287. ISBN978-0-7897-3795-3. Retrieved 9 July 2016. WEP is an IEEE standard introduced in 1997, designed to secure 802.11 networks.
8. ^Walker, Jesse. 'A History of 802.11 Security'(PDF). Rutgers WINLAB. Intel Corporation. Archived from the original(PDF) on 9 July 2016. Retrieved 9 July 2016. IEEE Std 802.11-1997 (802.11a) defined Wired Equivalent Privacy (WEP).
9. ^'WPA Part 2: Weak IV's'. informit.com. Archived from the original on 2013-05-16. Retrieved 2008-03-16.
10. ^'An Inductive Chosen Plaintext Attack against WEP/WEP2'. cs.umd.edu. Retrieved 2008-03-16.
11. ^IEEE 802.11i-2004: Medium Access Control (MAC) Security Enhancements(PDF). 2004. Archived from the original(PDF) on 2007-11-29. Retrieved 2007-12-18.
12. ^Nikita Borisov, Ian Goldberg, David Wagner. 'Intercepting Mobile Communications: The Insecurity of 802.11'(PDF). Retrieved 2006-09-12.Cite journal requires journal= (help)CS1 maint: multiple names: authors list (link)
13. ^Fluhrer, Scott; Mantin, Itsik; Shamir, Adi (2001). 'Weaknesses in the Key Scheduling Algorithm of RC4'(PDF).
14. ^Cam-Winget, Nancy; Housley, Russ; Wagner, David; Walker, Jesse (May 2003). 'Security Flaws in 802.11 Data Link Procotols'(PDF). Communications of the ACM. 46 (5): 35–39.
15. ^'Wireless Features'. www.smallnetbuilder.com.
16. ^Tews, Erik; Weinmann, Ralf-Philipp; Pyshkin, Andrei. 'Breaking 104 bit WEP in less than 60 seconds'(PDF).
17. ^Greenemeier, Larry (May 9, 2007). 'T.J. Maxx data theft likely due to wireless 'wardriving''. Information Week. Retrieved September 3, 2012.
18. ^'802.11b Update: Stepping Up Your WLAN Security'. networkmagazineindia.com. Retrieved 2008-03-16.
19. ^'WIRELESS NETWORK SECURITY'(PDF). Proxim Wireless. Retrieved 2008-03-16.Cite journal requires journal= (help)
20. ^'802.11mb Issues List v12'(excel). 20 Jan 2009. p. CID 98. The use of TKIP is deprecated. The TKIP algorithm is unsuitable for the purposes of this standard
21. ^'WEP2, Credibility Zero'. starkrealities.com. Retrieved 2008-03-16.
22. ^'Agere Systems is First to Solve Wireless LAN Wired Equivalent Privacy Security Issue; New Software Prevents Creation of Weak WEP Keys'. Business Wire. 2001-11-12. Retrieved 2008-03-16.
23. ^See Aircrack-ng

External links[edit]