TKIP is broken. Long live WPA

As pointed out by one of the maintainers of the SANS ISC (Internet Storm Center), WPA/TKIP has been broken (in one direction, from WAP to Client). An excellent explanation of how this is done can be found here.
Also: RaDaJo (RAul, DAvid and JOrge) Security Blog: WPA/TKIP ChopChop Attack

No comments: