{"id":2054,"date":"2017-10-16T12:51:07","date_gmt":"2017-10-16T16:51:07","guid":{"rendered":"https:\/\/solutionsreview.com\/wireless-network\/?p=2054"},"modified":"2018-02-23T09:57:18","modified_gmt":"2018-02-23T14:57:18","slug":"wifi-security-has-been-kracked-according-to-researchers","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/wireless-network\/wifi-security-has-been-kracked-according-to-researchers\/","title":{"rendered":"WiFi Security Has Been ‘Kracked,’ According to Researchers"},"content":{"rendered":"

\"WiFi<\/p>\n

Cue the feature images of shady people in hoodies. Researchers have reported that the WPA2 security protocol at the heart of nearly every modern wireless device has been broken. In summary, this means that almost every wireless-enabled device is at risk of attack.<\/p>\n

This bug refers to “KRACK” for Key Reinstallation Attack and exposes a fundamental flaw in WPA2, a common security protocol used in security a majority of wireless networks. The flaw was found by Mathy Vanhoef, a computer security academic. Vanhoef says the weakness lies in the protocol’s four-way handshake, which securely allows new devices with a pre-shared password to join the network.<\/p>\n

At worst, this weakness can allow attackers to decrypt network traffic from a WPA2-enabled device , take over connections, and inject content into the traffic stream. For the layperson, this means that your wireless devices are exposed to eavesdropping.<\/p>\n

News of the vulnerability was later confirmed on Monday by US Homeland Security’s cyber-emergency unit US-CERT, which about two months ago had confidentially warned vendors and experts of the bug,<\/p>\n

At its heart, the flaw is found in the cryptographic nonce, a randomly generated number used to prevent attacks. In this particular case, an attacker can trick a victim into reinstalling a key that’s already in use. Reusing the nonce number can allow an attacker the encryption by replaying, decrypting, or forging packets.<\/p>\n

The United States Computer Emergency Readiness Team<\/a> issued the following warning in response to the exploit:<\/p>\n

\n

US-CERT has become aware of several key management vulnerabilities in the 4-way handshake of the Wi-Fi Protected Access II (WPA2) security protocol. The impact of exploiting these vulnerabilities includes decryption, packet replay, TCP connection hijacking, HTTP content injection, and others. Note that as protocol-level issues, most or all correct implementations of the standard will be affected. The CERT\/CC and the reporting researcher KU Leuven, will be publicly disclosing these vulnerabilities on 16 October 2017.<\/p>\n<\/blockquote>\n

For more on the WPA2 break, check out krackattacks.com<\/a><\/strong><\/p>\n

\t\t\t

\"wireless<\/a>For information on the top 802.11ac solutions,\u00a0check out our latest Buyer’s Guide:<\/strong><\/h4>\n