WiFi Security - Revision history

RSchuller: /* WPA */

2024-12-07T18:04:59Z

WPA

← Older revision		Revision as of 18:04, 7 December 2024
Line 46:		Line 46:
	Communication Networks (ICCN), pages 53–56, 2015.</ref>		Communication Networks (ICCN), pages 53–56, 2015.</ref>

	;WPA offers two modes of ~~operation~~:		;WPA offers two modes of security:

	* Personal WPA or WPA-PSK (Pre-Shared Key):		* Personal WPA or WPA-PSK (Pre-Shared Key):

RSchuller: /* Basics */

2024-12-07T17:31:36Z

Basics

← Older revision		Revision as of 17:31, 7 December 2024
Line 9:		Line 9:

	As of 2023, most computers that connect to a wireless network have support for using WPA, WPA2, or WPA3.		As of 2023, most computers that connect to a wireless network have support for using WPA, WPA2, or WPA3.

			;RC4 Algorithm
			The Rivest Cipher 4 Algorithm is a 1987 by RSA Laboratories developed random generator or also called a key stream generator or stream cipher. RC4 works logically by XORing the key to the data. RC4 is used in WEP and early WPA for both, decryption and encryption data. <ref>Lashkari, Arash Habibi and Farnaz, Towhidi and Reheleh, Sadat Hosseini. Wired Equivalent Privacy (WEP). 2009 International Conference on Future Computer and Communication, pages 492–495, 2009.</ref>

	==Versions==		==Versions==

RSchuller: /* WEP */

2024-12-07T17:12:00Z

WEP

← Older revision		Revision as of 17:12, 7 December 2024
Line 28:		Line 28:
	}}</ref>		}}</ref>

	;Known Weaknesses of WEP		;Known Weaknesses of WEP:

	*WEP has no Mechanism to prevent to manipulate data packets. <ref name="wep versus wpa">Lashkari, Arash Habibi and Mansoor, Masood and Danesh, Amir Seyed. Wired Equivalent Privacy (WEP) versus Wi-Fi Protected Access (WPA). 2009 International Conference on Signal Processing Systems, pages 445–449, 2009.</ref>		*WEP has no Mechanism to prevent to manipulate data packets. <ref name="wep versus wpa">Lashkari, Arash Habibi and Mansoor, Masood and Danesh, Amir Seyed. Wired Equivalent Privacy (WEP) versus Wi-Fi Protected Access (WPA). 2009 International Conference on Signal Processing Systems, pages 445–449, 2009.</ref>
	*WEP can not prevent Replay Attacks <ref name="wep versus wpa" />		*WEP can not prevent Replay Attacks <ref name="wep versus wpa" />
	*WEP uses the RC4 Algorithm, this causes weak keys. With brute force it is possible to decrypt the key in minutes or hours on a standard Computer. <ref~~>Lashkari, Arash Habibi and Mansoor, Masood and Danesh, Amir Seyed. Wired Equivalent Privacy (WEP)~~ versus ~~Wi-Fi Protected Access (WPA). 2009 International Conference on Signal Processing Systems, pages 445–449, 2009.<~~/~~ref~~>		*WEP uses the RC4 Algorithm, this causes weak keys. With brute force it is possible to decrypt the key in minutes or hours on a standard Computer. <ref name="wep versus wpa" />
	*WEP uses the same IV every time, this allows to decrypt data without knowing the current key. <ref~~>Lashkari, Arash Habibi and Mansoor, Masood and Danesh, Amir Seyed. Wired Equivalent Privacy (WEP)~~ versus ~~Wi-Fi Protected Access (WPA). 2009 International Conference on Signal Processing Systems, pages 445–449, 2009.<~~/~~ref~~>		*WEP uses the same IV every time, this allows to decrypt data without knowing the current key. <ref name="wep versus wpa" />
	*WEP allows attackers to modify messages or data without knowing the encryption key. <ref~~>Lashkari, Arash Habibi and Mansoor, Masood and Danesh, Amir Seyed. Wired Equivalent Privacy (WEP)~~ versus ~~Wi-Fi Protected Access (WPA). 2009 International Conference on Signal Processing Systems, pages 445–449, 2009.<~~/~~ref~~>		*WEP allows attackers to modify messages or data without knowing the encryption key. <ref name="wep versus wpa" />
	*with WEP it is easy to manipulate Authentication messages. <ref~~>Lashkari, Arash Habibi and Mansoor, Masood and Danesh, Amir Seyed. Wired Equivalent Privacy (WEP)~~ versus ~~Wi-Fi Protected Access (WPA). 2009 International Conference on Signal Processing Systems, pages 445–449, 2009.<~~/~~ref~~>		*with WEP it is easy to manipulate Authentication messages. <ref name="wep versus wpa" />

	===WPA===		===WPA===

RSchuller: /* WEP */

2024-12-07T17:11:01Z

WEP

← Older revision		Revision as of 17:11, 7 December 2024
Line 30:		Line 30:
	;Known Weaknesses of WEP		;Known Weaknesses of WEP

	*WEP has no Mechanism to prevent to manipulate data packets. <ref>Lashkari, Arash Habibi and Mansoor, Masood and Danesh, Amir Seyed. Wired Equivalent Privacy (WEP) versus Wi-Fi Protected Access (WPA). 2009 International Conference on Signal Processing Systems, pages 445–449, 2009.</ref>		*WEP has no Mechanism to prevent to manipulate data packets. <ref name="wep versus wpa">Lashkari, Arash Habibi and Mansoor, Masood and Danesh, Amir Seyed. Wired Equivalent Privacy (WEP) versus Wi-Fi Protected Access (WPA). 2009 International Conference on Signal Processing Systems, pages 445–449, 2009.</ref>
	*WEP can not prevent Replay Attacks <ref~~>Lashkari, Arash Habibi and Mansoor, Masood and Danesh, Amir Seyed. Wired Equivalent Privacy (WEP)~~ versus ~~Wi-Fi Protected Access (WPA). 2009 International Conference on Signal Processing Systems, pages 445–449, 2009.<~~/~~ref~~>		*WEP can not prevent Replay Attacks <ref name="wep versus wpa" />
	*WEP uses the RC4 Algorithm, this causes weak keys. With brute force it is possible to decrypt the key in minutes or hours on a standard Computer. <ref>Lashkari, Arash Habibi and Mansoor, Masood and Danesh, Amir Seyed. Wired Equivalent Privacy (WEP) versus Wi-Fi Protected Access (WPA). 2009 International Conference on Signal Processing Systems, pages 445–449, 2009.</ref>		*WEP uses the RC4 Algorithm, this causes weak keys. With brute force it is possible to decrypt the key in minutes or hours on a standard Computer. <ref>Lashkari, Arash Habibi and Mansoor, Masood and Danesh, Amir Seyed. Wired Equivalent Privacy (WEP) versus Wi-Fi Protected Access (WPA). 2009 International Conference on Signal Processing Systems, pages 445–449, 2009.</ref>
	*WEP uses the same IV every time, this allows to decrypt data without knowing the current key. <ref>Lashkari, Arash Habibi and Mansoor, Masood and Danesh, Amir Seyed. Wired Equivalent Privacy (WEP) versus Wi-Fi Protected Access (WPA). 2009 International Conference on Signal Processing Systems, pages 445–449, 2009.</ref>		*WEP uses the same IV every time, this allows to decrypt data without knowing the current key. <ref>Lashkari, Arash Habibi and Mansoor, Masood and Danesh, Amir Seyed. Wired Equivalent Privacy (WEP) versus Wi-Fi Protected Access (WPA). 2009 International Conference on Signal Processing Systems, pages 445–449, 2009.</ref>

RSchuller: /* Versions */

2024-12-07T17:10:07Z

Versions

← Older revision		Revision as of 17:10, 7 December 2024
Line 29:		Line 29:

	;Known Weaknesses of WEP		;Known Weaknesses of WEP
	~~<ref name="WEP versus WPA">{{Cite conference~~
	~~\| last1 = Lashkari~~
	~~\| first1 = Arash Habibi~~
	~~\| last2 = Mansoori~~
	~~\| first2 = Masood~~
	~~\| last3 = Danesh~~
	~~\| first3 = Mir Mohammad Seyed~~
	~~\| title = Wired Equavilent Privacy (WEP) versus Wi-Fi Protected Access (WPA)~~
	~~\| booktitle = 2009 International Conference on Signal Processing Systems~~
	~~\| year = 2009~~
	~~\| pages = 445-449~~
	~~\| doi = 10.1109/ICSPS.2009.87~~
	~~\| url = https://ieeexplore.ieee.org/document/5166826~~
	~~}}</ref>~~

	*WEP has no Mechanism to prevent to manipulate data packets.		*WEP has no Mechanism to prevent to manipulate data packets. <ref>Lashkari, Arash Habibi and Mansoor, Masood and Danesh, Amir Seyed. Wired Equivalent Privacy (WEP) versus Wi-Fi Protected Access (WPA). 2009 International Conference on Signal Processing Systems, pages 445–449, 2009.</ref>
	*WEP can not prevent Replay Attacks		*WEP can not prevent Replay Attacks <ref>Lashkari, Arash Habibi and Mansoor, Masood and Danesh, Amir Seyed. Wired Equivalent Privacy (WEP) versus Wi-Fi Protected Access (WPA). 2009 International Conference on Signal Processing Systems, pages 445–449, 2009.</ref>
	*WEP uses the RC4 Algorithm, this causes weak keys. With brute force it is possible to decrypt the key in minutes or hours on a standard Computer.		*WEP uses the RC4 Algorithm, this causes weak keys. With brute force it is possible to decrypt the key in minutes or hours on a standard Computer. <ref>Lashkari, Arash Habibi and Mansoor, Masood and Danesh, Amir Seyed. Wired Equivalent Privacy (WEP) versus Wi-Fi Protected Access (WPA). 2009 International Conference on Signal Processing Systems, pages 445–449, 2009.</ref>
	*WEP uses the same IV every time, this allows to decrypt data without knowing the current key.		*WEP uses the same IV every time, this allows to decrypt data without knowing the current key. <ref>Lashkari, Arash Habibi and Mansoor, Masood and Danesh, Amir Seyed. Wired Equivalent Privacy (WEP) versus Wi-Fi Protected Access (WPA). 2009 International Conference on Signal Processing Systems, pages 445–449, 2009.</ref>
	*WEP allows attackers to modify messages or data without knowing the encryption key.		*WEP allows attackers to modify messages or data without knowing the encryption key. <ref>Lashkari, Arash Habibi and Mansoor, Masood and Danesh, Amir Seyed. Wired Equivalent Privacy (WEP) versus Wi-Fi Protected Access (WPA). 2009 International Conference on Signal Processing Systems, pages 445–449, 2009.</ref>
	*with WEP it is easy to manipulate Authentication messages.		*with WEP it is easy to manipulate Authentication messages. <ref>Lashkari, Arash Habibi and Mansoor, Masood and Danesh, Amir Seyed. Wired Equivalent Privacy (WEP) versus Wi-Fi Protected Access (WPA). 2009 International Conference on Signal Processing Systems, pages 445–449, 2009.</ref>

	===WPA===		===WPA===

RSchuller: /* WEP */

2024-12-07T17:04:39Z

WEP

← Older revision		Revision as of 17:04, 7 December 2024
Line 32:		Line 32:
	\| last1 = Lashkari		\| last1 = Lashkari
	\| first1 = Arash Habibi		\| first1 = Arash Habibi
	\| last2 = ~~Danesh~~		\| last2 = Mansoori
	\| first2 = ~~Mir Mohammad Seyed~~		\| first2 = Masood
	\| last3 = ~~Mansoori~~		\| last3 = Danesh
	\| first3 = ~~Masood~~		\| first3 = Mir Mohammad Seyed
	\| title = Wired Equavilent Privacy (WEP) versus Wi-Fi Protected Access (WPA)		\| title = Wired Equavilent Privacy (WEP) versus Wi-Fi Protected Access (WPA)
	\| booktitle = 2009 International Conference on Signal Processing Systems		\| booktitle = 2009 International Conference on Signal Processing Systems

RSchuller: /* Versions */

2024-12-07T17:02:13Z

Versions

← Older revision		Revision as of 17:02, 7 December 2024
Line 13:		Line 13:
	===WEP===		===WEP===
	WEP (Wired Equivalent Privacy) was an initial encryption standard implemented to provide security for wireless network connections, aiming to offer a level of privacy comparable to that of a wired network. Encryption keys of 60-bit and 128-bit lengths were utilized in WEP, comprising a mix of user-defined and pre-set bits by the manufacturer. The RC4 algorithm was employed to encrypt data, with each packet being secured by a key generated through the amalgamation of an Initialization Vector (IV) and a shared key. The decryption process entailed the inverse operation, where the IV and the shared key were used to create a key stream to decrypt the data payload. However, significant security flaws in WEP led to the eventual replacement of this protocol with more robust security standards.		WEP (Wired Equivalent Privacy) was an initial encryption standard implemented to provide security for wireless network connections, aiming to offer a level of privacy comparable to that of a wired network. Encryption keys of 60-bit and 128-bit lengths were utilized in WEP, comprising a mix of user-defined and pre-set bits by the manufacturer. The RC4 algorithm was employed to encrypt data, with each packet being secured by a key generated through the amalgamation of an Initialization Vector (IV) and a shared key. The decryption process entailed the inverse operation, where the IV and the shared key were used to create a key stream to decrypt the data payload. However, significant security flaws in WEP led to the eventual replacement of this protocol with more robust security standards.
	<ref name="Survey WEP WPA WPA2>{{Cite conference		<ref name="Survey WEP WPA WPA2">{{Cite conference
	\| last1 = Lashkari		\| last1 = Lashkari
	\| first1 = Arash Habibi		\| first1 = Arash Habibi
Line 29:		Line 29:

	;Known Weaknesses of WEP		;Known Weaknesses of WEP
	<ref name="WEP versus WPA>{{~~Conference~~		<ref name="WEP versus WPA">{{Cite conference
	\| last1 = Lashkari		\| last1 = Lashkari
	\| first1 = Arash Habibi		\| first1 = Arash Habibi

RSchuller: /* WEP */

2024-12-07T17:00:22Z

WEP

← Older revision		Revision as of 17:00, 7 December 2024
Line 28:		Line 28:
	}}</ref>		}}</ref>

	;Known Weaknesses of WEP		;Known Weaknesses of WEP
	*WEP has no Mechanism to prevent to manipulate data packets.		<ref name="WEP versus WPA>{{Conference
	*WEP can not prevent Replay Attacks
	*WEP uses the RC4 Algorithm, this causes weak keys. With brute force it is possible to decrypt the key in minutes or hours on a standard Computer.
	*WEP uses the same IV every time, this allows to decrypt data without knowing the current key.
	*WEP allows attackers to modify messages or data without knowing the encryption key.
	*with WEP it is easy to manipulate Authentication messages.
	<ref name="WEP ~~vs.~~ WPA>{{~~Cite conference~~
	\| last1 = Lashkari		\| last1 = Lashkari
	\| first1 = Arash Habibi		\| first1 = Arash Habibi
Line 49:		Line 43:
	\| url = https://ieeexplore.ieee.org/document/5166826		\| url = https://ieeexplore.ieee.org/document/5166826
	}}</ref>		}}</ref>

			*WEP has no Mechanism to prevent to manipulate data packets.
			*WEP can not prevent Replay Attacks
			*WEP uses the RC4 Algorithm, this causes weak keys. With brute force it is possible to decrypt the key in minutes or hours on a standard Computer.
			*WEP uses the same IV every time, this allows to decrypt data without knowing the current key.
			*WEP allows attackers to modify messages or data without knowing the encryption key.
			*with WEP it is easy to manipulate Authentication messages.

	===WPA===		===WPA===

RSchuller: /* WEP */

2024-12-07T16:56:24Z

WEP

@@ Line 35: / Line 35: @@
 *WEP allows attackers to modify messages or data without knowing the encryption key.
 *with WEP it is easy to manipulate Authentication messages.
 ===WPA===

RSchuller: /* WEP */

2024-12-07T16:48:45Z

WEP

← Older revision		Revision as of 16:48, 7 December 2024
Line 32:		Line 32:
	*WEP can not prevent Replay Attacks		*WEP can not prevent Replay Attacks
	*WEP uses the RC4 Algorithm, this causes weak keys. With brute force it is possible to decrypt the key in minutes or hours on a standard Computer.		*WEP uses the RC4 Algorithm, this causes weak keys. With brute force it is possible to decrypt the key in minutes or hours on a standard Computer.
	*WEP ~~doesn't use different~~ IV's every time, this allows to decrypt data without knowing the current key.		*WEP uses the same IV every time, this allows to decrypt data without knowing the current key.
	*WEP allows attackers to modify messages or data without knowing the encryption key.		*WEP allows attackers to modify messages or data without knowing the encryption key.
	*with WEP it is easy to manipulate Authentication messages.		*with WEP it is easy to manipulate Authentication messages.