Wireless security protocol, WEP, is everywhere in Wi-Fi networks and just got quicker and easier for hackers to break into.
Researchers have discovered a new way of attacking Wired Equivalent Privacy that requires an amount of data "more than an order of magnitude" less than the best known key-recovery attacks. In effect, the cracking can be done within a minute, as the title of the paper suggests:
Breaking 104 bit WEP in less than 60 seconds.
Specifically, only 40,000 data packets are needed for a 50 percent chance of success, while 85,000 packets give a 95 percent chance of success, according to the paper's authors: Erik Tews, Ralf-Philipp Weinmann and Andrei Pyshkin, all researchers in the computer science department at Darmstadt University of Technology in Darmstadt, Germany.
The ease of cracking WEP is nothing new; cryptanalysts showed six years ago that any WEP key can be cracked with readily available software in one minute or less. The protocol, which is part of the IEEE 802.11 wireless networking standard, was superseded by WPA (Wi-Fi Protected Access) in 2003, then by WPA2, another name for the full IEEE 802.11i standard.
What's new that has been missing from WEP cracking until now is that a Wi-Fi attacker no longer needs long periods of time nor much smarts, according to Wi-Fi security experts.
"…To crack WEP - up until now - it 1) required a knowledgeable attacker - and - 2) took a long time," said Andrea Bittau, in an e-mail exchange. Bittau is a research fellow at the University College London and a co-author of
a paper describing what had been the most effective WEP cracking technique prior to the Germans' research.
"In the past, the wait time could have been hours, whereas now, it seems to be only a few minutes," Battau said. "Thus, WEP cracking has finally made it into the 'general public' at a reasonable cost - only a few minutes - ."
Thanks to this new discovery, we can expect the arrival of tools that can break WEP in 10 minutes or less by pressing a single button, Battau said. In other words, tools that can allow for walk-through hackings, whether in Wi-Fi-networked conference rooms or in the local coffee shop.
Battau's Web cracking paper, published with Mark Handley of University College London and Netgear's Joshua Lackey, was titled "The Final Nail in WEP's Coffin."
When published in May 2005, the paper presented a breakthrough in WEP cracking: a novel vulnerability that allows an attacker to send arbitrary data on a WEP network after having eavesdropped only a single data packet, along with techniques for real-time decryption of data packets that can be used under common circumstances.
If that "final nail" wasn't the final nail, will this new research be the one that really puts WEP into its grave?
David Wagner, co-author of a paper on the insecurity of 802.11, said he'd like to think it's the last nail for WEP, but we're probably not going to see the end of it soon.
"Ironically, last May, when Bittau, Handley and Lackey released their research showing new flaws in WEP, I remember calling that the final nail in the coffin and the end of the road for WEP," he said in an e-mail exchange. "But it seems that no matter how bad we think WEP is, the news can always be worse than we imagined."
And still, WEP enjoys wide deployment.
In Battau's May 2006 paper, the researchers detail their survey of 400 wireless networks in London and 2,539 networks in the Seattle area. Although more secure protocols exist - WPA and 802.11i - the researchers found that few networks use them.
"In both cases, about half of the networks used encryption," according to the paper. "In London, 76 percent of the encrypted networks in our sample used WEP, and in Seattle 85 percent of them used WEP. Although vendors recommend upgrading to WPA or 802.11i, only a minority of users seem to use these solutions."
But as Wi-Fi networking equipment vendors will tell you, there's no way to walk away from WEP with all the legacy laptops and network cards still around that use the encryption scheme.
Som Pal Choudhury, Netgear's product line manager, advanced wireless, said in an interview that, like many, WPA and WPA2 are default encryption schemes in the company's routers and that Netgear's reference and setup manuals all explain the dangers of WEP.
In fact, the Wi-Fi Alliance as of March 2006 mandated WPA2 for all new devices in order to be Wi-Fi Alliance certified.
Still, Pal Choudhury said, there are "Legacy drivers, legacy devices out there … you buy a laptop for three to five years. If you bought in 2002, 2003, it used to only support WEP. Now, with the second generation of laptops you're going to buy, these are all going to be WPA, WPA2."
In the meantime, Wi-Fi security experts agree that the new WEP cracking techniques should be a wake-up call for equipment manufacturers to make defaults more secure and to make the security features easier to use.
"Perhaps this will lead people to totally abandon WEP and switch to something else," Battau said. "Frankly, however, I think that WEP will still be around for a while due to ignorance. It has received much publicity in academic papers, but there was no response. We will now see what the response will be when a one-click tool for breaking WEP in 10 minutes becomes available."
A one-button WEP-breaking tool would certainly get Wi-Fi users' attention and thus hasten WEP's demise. Wi-Fi security experts have the Germans to thank for that. After all, Battau said, "Yes, - the Germans' research - was the missing nail."
Copyright 2007 by Ziff Davis Media, Distributed by United Press International
Related stories:
Enjoy Compact Wireless with Rapid Data Transfers
To cater to users who require a wireless USB solution that is both compact and fast, ASUS has released the ASUS WL-160N – the world’s smallest 802.11n USB 2.0 wireless card. This small and compact marvel supports the latest 802.11n draft 2.0 specifications for fast data transfers; and is fully compatible with 802.11b/g standards.
Existing Technologies Combine to Make Automated Home
The National Institute of Advanced Industrial Science and Technology (Japan), Ymatic Ltd., and Biometrica Systems Asia Co. Ltd. have jointly developed a novel automated home – not with new technology, but with a clever combining of existing solutions. The home combines robots guided by IC tags, a biometric face authentication system, and a wireless network using a software solution called RT middleware.
Scientist of the University of Ghent discovers natural atom antihydrogen
On February 15, 2005 of the Physics/Einstein Year, the complete story of the discovery of natural atom antihydrogen, started in 1985, was published on-line.
The antihydrogen problem has become a highly mediatic issue, both in the specialized physics and the more general press [1]. A real hype started at the end of 2002 when rivalling CERN-based groups ATHENA and ATRAP both claimed the production of large quantities of artificial antihydrogen. Scientists, wondering about a signature for the presence of this mysterious species antihydrogen, were disappointed as no direct signature whatever was presented. In fact, a spectral identification of antihydrogen is impossible since measuring its spectrum is exactly the goal of ATHENA and ATRAP collaborations.
Tri-Mode Wi-Fi Module from Intel
Intel has added new wireless capabilities to its Centrino mobile technology for laptops.
Intel Corporation today announced the addition of key
wireless capabilities for notebooks based on Intel®
Centrino™ mobile technology, including ease-of-use software, advanced security features, and support for the three
Wi-Fi standards. The new tri-mode wireless module (supporting IEEE standards 802.11a, b and g) and wireless software help make it faster and easier for end-users to set up a wireless connection with any Wi-Fi network, at the maximum available data rate.
Samsung Introduces New Bluetooth Headset Designed by Bang and Olufsen
Samsung Electronics showcased the high-class Bluetooth Headset (WEP 420), designed by Bang & Olufsen, for the first time at CeBIT 2007 in Hanover, Germany.
Portable D-Link Wireless Pocket Router/AP Smaller than a PDA
D-Link, the global leader in consumer network connectivity, today announced the D-Link Wireless Pocket Router/AP, a portable wireless networking solution for business travelers wanting to access and share hotel Internet connections, wirelessly connect Ethernet devices or secure shared information from potential hackers. The D-Link Wireless Pocket Router/AP is smaller than the average PDA, measures 3.25" x 2.5" x.75" and ships with a convenient carrying case to make it a complete and compact wireless networking solution. For added mobility, the D-Link Wireless Pocket Router/AP can be powered over USB if power outlets are not available.
STMicroelectronics' Dual Band Wireless LAN Baseband Processor Melds Advanced Features and Low Cost
STLC8201 simplifies design and cuts the cost of 802.11a/b/g applications.
Geneva, June 8, 2004 - STMicroelectronics (NYSE:STM) today announced the availability of its next generation STLC8201 multi-mode wireless LAN baseband processor chip. The STLC8201, along with the previously announced STLC8100 dual band wireless LAN RF transceiver, form the latest STLC8000 series platform enabling an array of low cost IEEE802.11a/b/g systems including wireless ADSL gateways, broadband routers, access points, media servers, bridges, print servers as well as clients and other wireless modules.