New WPA-TKIP Attack

[jdabbs]

http://www.computerworld.com/s/arti...on_Wi_Fi_encryption_in_a_minute?taxonomyId=17

This attack is to be demonstrated next month at IEICE but the paper describing the technique is already available:
http://jwis2009.nsysu.edu.tw/location/paper/A%20Practical%20Message%20Falsification%20Attack%20on%20WPA.pdf (via Full Disclosure).

 

[thiggins]

I can't tell whether this new attack works on WPA2/AES.

 

[jdabbs]

It does not. AFAICT, the attack is based on last year's technique with the following improvements: faster, QoS no longer required. Neither attack gives you access to the passphrase--only the ability to forge certain packets.