Feeds

Researchers find more flaws in wireless security

WPA networks open to limited attack

Internet Security Threat Report 2014

Wireless networks that use a popular form of security known as Wi-Fi Protected Access (WPA) are vulnerable to an attack that could compromise certain communications in less than 15 minutes, two researchers plan to tell attendees next week at the PacSec 2008 conference in Tokyo.

Martin Beck and Erik Tews - two graduate students at technical universities in Germany - found a combination of techniques that allow an attacker to decrypt limited communications protected with the lesser of two WPA security protocols, known as the Temporal Key Integrity Protocol or TKIP. Using the techniques, attackers could also recover a special integrity checksum and send up to seven custom packets to clients on the network, sources told SecurityFocus.

The attack does not allow the key protecting the communications to be recovered, one of the researchers stressed .

"The new attack on WPA is not a complete key recovery attack," Tews said in an email to SecurityFocus. "It just allows you to decrypt packets and inject packets with custom content. But there is only a single short-term key recovered during the attack."

The research describes the latest weakness in wireless networks' security. In 2001, three researchers found a way to reliably break the previous wireless security protocol, known as Wired Equivalent Privacy (WEP), in less than two hours. By 2007, the latest refinement in attacks against WEP - found by Tews and two other researchers - reduced the time to recover a WEP key to less than a minute of calculations.

In 2002, after seeing WEP thoroughly broken, the industry alliance responsible for setting standards for wireless access points created the Wi-Fi Protected Access (WPA) protocol. Two years, later the firms created a stronger version of the standard known as WPA2.

Tews and Beck's attack appears to be the first practical, albeit limited, break of WPA encryption.

The duo's attack on WPA's Temporal Key Integrity Protocol (TKIP) uses a similar technique to an attack on WEP found in 2004, according to a copy of Beck's and Tews' presentation obtained by SecurityFocus. The WEP attack, known as chopchop, could decipher a packet of data without knowing the key by guessing each byte and using the access point as a check on each guess: If the packet is accepted by the access point, then the attacker knows the plaintext guess is correct.

The Temporal Key Integrity Protocol (TKIP) adds several countermeasures to foil attacks that would have succeeded against WEP. The protocol adds a message integrity check, or MIC, to protect against header and message alterations and uses replay counters to prevent replay attacks.

The researchers, however, found that the countermeasures only made the attack take longer: a wrong guess would cause the packet to be dropped by the access point, while a correct guess would cause a MIC failure and require the attacker to wait 60 seconds. In the case of an important type of networking data known as an Address Resolution Protocol (ARP) packet, only 14 bytes are not known. In less than 15 minutes, an encrypted ARP packet could be deciphered, including the secret MIC data, according to the researchers' presentation.

The attack also allows a limited amount of data to be sent on other channels using the same keystream - an end run around the replay-attack protection of TKIP.

While the security vulnerabilities are limited, the techniques could be used in a denial-of-service (DoS) attack, the researchers stated in their presentation, by using ARP injection to overwrite entries in the ARP table or potentially attack a local network's domain servers. The technique could also be used to channel data through a corporate firewall, they added.

In an email to a security mailing list, PacSec conference organizer Dragos Ruiu recommended that wireless-network administrators move to WPA2 or use the improved WPA security mode, known as Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP). In the latter case, the access point should not allow clients to revert to TKIP for communications with legacy systems, Ruiu said.

"If you aren't given the option to disable this, you might want to think about getting a different Access Point or Wi-Fi Router," he said.

According to Tews, an experimental implementation of the researchers' attack has been introduced into a development version of the aircrack-ng tool.

Beck and Tews plan to discuss their findings at the PacSec conference in Tokyo next week.

This article originally appeared in Security Focus.

Copyright © 2008, SecurityFocus

Internet Security Threat Report 2014

More from The Register

next story
George Clooney, WikiLeaks' lawyer wife hand out burner phones to wedding guests
Day 4: 'News'-papers STILL rammed with Clooney nuptials
Shellshock: 'Larger scale attack' on its way, warn securo-bods
Not just web servers under threat - though TENS of THOUSANDS have been hit
Apple's new iPhone 6 vulnerable to last year's TouchID fingerprint hack
But unsophisticated thieves need not attempt this trick
PEAK IPV4? Global IPv6 traffic is growing, DDoS dying, says Akamai
First time the cache network has seen drop in use of 32-bit-wide IP addresses
Oracle SHELLSHOCKER - data titan lists unpatchables
Database kingpin lists 32 products that can't be patched (yet) as GNU fixes second vuln
Researchers tell black hats: 'YOU'RE SOOO PREDICTABLE'
Want to register that domain? We're way ahead of you.
Stunned by Shellshock Bash bug? Patch all you can – or be punished
UK data watchdog rolls up its sleeves, polishes truncheon
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.