Researchers Find Flaws in WPA2's 4-way Handshake Implementations

guest · Aug 9, 2018

Researchers Find Flaws in WPA2's 4-way Handshake Implementations
August 09, 2018
https://www.securityweek.com/researchers-find-flaws-wpa2s-4-way-handshake-implementations

The discovery was the result of simulating cryptographic primitives during symbolic execution for the analysis of security protocol implementations, KU Leuven researchers Mathy Vanhoef and Frank Piessens explain in a recently published whitepaper (PDF).

By applying the technique on three client-side implementations of WPA2’s 4-way handshake, the researchers discovered timing side-channels when verifying authentication tags, a denial-of-service attack, a stack-based buffer overflow, and a non-trivial decryption oracle.

The attack, however, is only possible if WPA2 is used and if the client selects TKIP as the pairwise cipher, so that the RC4 stream cipher is used to encrypt the key data field (if CCMP is selected, AES is used to protect the key data field). Both conditions are met when the Wi-Fi network uses WPA2 and only supports TKIP (in 2016, 20% of protected Wi-Fi networks used this configuration).
Click to expand...

Whitepaper (PDF): https://papers.mathyvanhoef.com/woot2018.pdf

Log in or Sign up

Researchers Find Flaws in WPA2's 4-way Handshake Implementations

guest Guest

Log in or Sign up

Researchers Find Flaws in WPA2's 4-way Handshake Implementations

guest Guest

Useful Searches