Re: WPA Pre-Shared Key TKIP vs AES

["Paul D. Robertson" <paul () compuwar net>]

On Mon, 20 Dec 2004, Mark wrote:

> > At this stage, is it really better than nothing?  At least with nothing,
> > you know you're running wide open.  With WEP, you assume some
> > protection and now with differential attacks, we're at ~200k packets with
> > unique IVs for a definite break, or 2.5x that if they're using long keys.
>
> I think it is, in the following two ways:
> 1) WinXP automatically connects to the strongest signal, which may mean
> yours...

Good point.  There are certainly better ways than WEP to stop this, but
it's a valid point.

> 2) I read somewhere that for litigation purposes, using any encryption
> at all is akin to a warning banner, implying that the network is
> intended to be private in nature.

I think it's beyond a warning banner, as it shows intent- another very
good point.

> > Morrow's link was enough to end the thread, unless someone has something
> > really useful to add[1].
> Which is why I only replied to you, and let you decide whether it's
> worth adding my 2 cents to the discussion. Thanks,

List copied on my reply- these are both very valid points, and ultimately
useful for people to consider when devising wireless defenses.

Thanks,

Paul
-----------------------------------------------------------------------------
Paul D. Robertson      "My statements in this message are personal opinions
paul () compuwar net       which may have no basis whatsoever in fact."
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards