[kismac] Re: weak IVs
- From: Michael Rossberg <mick@xxxxxxxxxxxxxxxx>
- To: kismac@xxxxxxxxxxxxx
- Date: Sun, 11 Jul 2004 18:44:20 +0200
Hi,
using kismac 0.12a i joyfully collected some 8000 weak IVs from a
nearby network. however this was insufficient to crack wep. when i
imported the pcap dump into 0.11b, i had 1 weak IV in total... I can
provide this dump if it will help fix what appears to be a bug.
this is actually a feature. i outlined it briefly in a mail in may. the
idea is the following. there are a number of ivs, which are always
weak. this is what airsnort usually collects and what was told in the
FMS paper. however there are ivs which can be weak, depending on the
chosen key. this is an additional vulnerability which was discovered by
h1kari <http://www.dachb0den.com/projects/bsd-airtools/wepexp.txt>.
kismac will keep this packets too, and do the selection of weak or not
later on. hope this helps
mick
Other related posts:
