WEP and WPA2
You are not logged in. Access is limited. Login or see membership information. • Streetwise Security Zone Community

The Streetwise Security Zone Discussion Forums are a great way to see what other managers are doing about security and what problems they have faced. You can find a lot of helpful hints and tips that could save you time and money.

You must join The Streetwise Security Zone (click HERE) in order to reply or post new items in the forums.

Author Message

RickLeir
Personal

Subject: WEP and WPA2
Technical IT Security Discussions
posted by RickLeir on Monday, February 7th 2011 @ 1:17 PM

If you set up your wifi base station to allow WEP and WPA2 connections (WEP for a Wii or DS, WPA2 for a laptop), and a cracker sniffs the WEP connection, does she learn anything that would be useful in cracking a WPA2 connection? Does he get the passphrase or key?

Thanks,

Rick


ScottWright
Group Administrator

Subject: RE: WEP and WPA2
Technical IT Security Discussions
posted by ScottWright on Thursday, February 10th 2011 @ 7:19 AM

Good question, Rick. I'm not 100% sure of the correct technical answer on what vulnerabilities might exist in the "hybrid" implementations of WPA and WEP for wireless routers. My gut feel is that there shouldn't be any real vulnerabilities, because the router should be using a different key for every WPA session. Unless there is some severely bad design failure in how the routers manage connections, WPA sessions should be secure. On the other hand, any WEP sessions on the same router could be vulnerable to one of the other WEP sessions getting hacked. In fact one WEP session is as vulnerable as the next to an attack because of WEP's standard architecture.

I'm not sure if that helps, but I would like to hear any other members' views.

- Scott

________________________________
Scott Wright
The Streetwise Security Coach

Would your organization be interested in obtaining the right to use my lessons or articles in your enterprise security awareness program? Please email me at the address below...

Email: scott@streetwise-security-zone.com
Twitter: http://www.twitter.com/streetsec
Phone: 613-693-0997
Podcast: http://www.streetwise-security-zone.com/podcast.html


Copyright 2012. Security Perspectives Inc. All Rights Reserved.