RE: Rainbowtables for WPA PSK?

["Meidinger Chris" <chris.meidinger () badenIT de>]

Hi Jeroen,

Both STA and AP use nonces to defeat a replay or precalc attack.

http://en.wikipedia.org/wiki/Nonce

Key generation is significantly more complicated in WPA than in WEP.

Here's a brief bit about what's relevant to cracking WPA:

http://www.ciscopress.com/articles/article.asp?p=370636&seqNum=6&rl=1

And I hate to post a microsoft link, but this explains WPA key
generation and mangement very clearly:

http://www.microsoft.com/technet/community/columns/cableguy/cg0805.mspx 

Cheers,

Chris 

> -----Original Message-----
> From: Jeroen [mailto:jeroen () isvet nl] 
> Sent: Tuesday, December 20, 2005 9:58 PM
> To: pen-test () securityfocus com
> Subject: Rainbowtables for WPA PSK?
>
> Without studying the ins and outs, I think it should be 
> possible to generate
> rainbowtables for WPA PSKs. Especially since on-the-fly 
> cracking takes quite
> some time per crypt and most users use a alphanumeric 
> characterset for the
> pass. It my assumption right? Anyone already working on this 
> subject? Please
> let me know!
>
> Gz,
> Jeroen
>
>
>
> --------------------------------------------------------------
> ----------------
> Audit your website security with Acunetix Web Vulnerability Scanner: 
>
> Hackers are concentrating their efforts on attacking 
> applications on your 
> website. Up to 75% of cyber attacks are launched on shopping 
> carts, forms, 
> login pages, dynamic content etc. Firewalls, SSL and 
> locked-down servers are 
> futile against web application hacking. Check your website 
> for vulnerabilities 
> to SQL injection, Cross site scripting and other web attacks 
> before hackers do! 
> Download Trial at:
>
> http://www.securityfocus.com/sponsor/pen-test_050831
> --------------------------------------------------------------
> -----------------

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:

Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers do!
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------