Full Disclosure mailing list archives
Re: WiFi is no longer a viable secure connection
From: Cedric Blancher <blancher () cartel-securite fr>
Date: Sat, 11 Oct 2008 02:36:15 +0200
Le samedi 11 octobre 2008 à 11:03 +1100, Ivan . a écrit :
Global Secure Systems has said that a Russian's firm's use of the latest NVidia graphics cards to accelerate WiFi 'password recovery' times by up to an astonishing 10,000 per cent proves that WiFi's WPA and WPA2 encryption systems are no longer enough to protect wireless data.
No kinding ?! 100 times what a CPU can do[1] ?! Whaooo. But what are they referring to saying "up to 100 times faster than by using CPU only" ? We don't know. On, fast CPU, Aircrack cracking speed can go up to around 650/700 psk/s. By 100, it means 65k/70k psk/s. Let's round it to 100k psk/s. Now, do the maths. A PSK is a least 8 ASCII printable chars between codes 32 and 126. I let you figure how much time you will need to cover the minimum length (8 chars) key space. We covered the subject at BA-Con. We can reach 12k psk/s on a single GTX280 alone[2]. That's only a factor 5 to 6 behind, without any brilliant optimisation. I don't see any breakthrough here that could make WPA/WPA2 PSK inefficient. Really. Need something like a real crypto attack, or real computation power boost, like reaching 10M/s. [1] http://www.elcomsoft.com/news/268.html [2] http://sid.rstack.org/pres/0810_BACon_WPA2_en.pdf -- http://sid.rstack.org/ PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE
Hi! I'm your friendly neighbourhood signature virus. Copy me to your signature file and help me spread!
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- WiFi is no longer a viable secure connection Ivan . (Oct 10)
- Re: WiFi is no longer a viable secure connection Cedric Blancher (Oct 10)
- Re: WiFi is no longer a viable secure connection line (Oct 10)
- Re: WiFi is no longer a viable secure connection Valdis . Kletnieks (Oct 10)
- Re: WiFi is no longer a viable secure connection Cedric Blancher (Oct 10)
- Message not available
- Fwd: WiFi is no longer a viable secure connection Anshuman G (Oct 10)
- Re: Fwd: WiFi is no longer a viable secure connection Cedric Blancher (Oct 10)
- Re: Fwd: WiFi is no longer a viable secure connection A . L . M . Buxey (Oct 11)
- Re: Fwd: WiFi is no longer a viable secure connection Anshuman G (Oct 11)
- Re: Fwd: WiFi is no longer a viable secure connection Cedric Blancher (Oct 11)
- Re: WiFi is no longer a viable secure connection Cedric Blancher (Oct 10)