Friday February 10, 2012 1:20 PM AEST

WPA data is gone in 60 seconds

By The Inquirer
10:37 Aug 28, 2009 | 4 Comments
Tags: wpa | encryption | security | news
WPA data is gone in 60 seconds

Without any car chase...

Japanese boffins took time out from fighting giant moths to work out how to break the WPA encryption system used in wireless routers in just sixty seconds.

Toshihiro Ohigashi of Hiroshima University and Masakatu Morii of Kobe University plan to tell the world plus dog how to do it at a technical conference set for September 25 in Hiroshima.

The attack gives hackers a way to read encrypted traffic sent between computers and certain types of routers that use the WPA or WiFi Protected Access encryption system.

It has been known that WPA could be broken for some months now, but these researchers have come up with a theoretical attack and made it practical.

An earlier attack technique, developed by researchers Martin Beck and Erik Tews, worked on a smaller range of WPA devices and took between 12 and 15 minutes.

Both attacks work on WPA systems that use the Temporal Key Integrity Protocol (TKIP) algorithm.

To be fair the WPA standard is a bit long in the tooth. It was designed as an interim encryption method as WiFi security was developing and has long since been superseded by WPA2. However there is still a fair bit of WPA with TKIP kit out there since 2006.

Newer WPA2 devices that use the stronger Advanced Encryption Standard (AES) algorithm remain safe for now.

 

theinquirer.net (c) 2010 Incisive Media

 
Behind the scenes with Mass Effect 3! GTX 560 VGA round-up! Essential Skyrim tweaks to improve your game! Plus reviews, news, hardware, more games, and easy to following modding guides for PC builders. ON SALE NOW!
4 Comments
orcone
Aug 28, 2009 11:22 AM
Awesome. I look forward to the results.

Free internet is always good.
Mademan
Aug 28, 2009 12:04 PM
lol then live in a terrace house or an apartment. Chances are someone near you has a wireless router, and is too dumb to set it up properly.
wlayton27
Aug 28, 2009 12:56 PM
Hey, that hurts Mademan ... Just checked my router setup and found I used the WPA (TKIP) instead of WPA2 (AES) ... didn't think there was a difference really -- my OS doesn't need any network setting adjusting to switch over. I feel much safer now - thanks Atomic.

Living in a Barracks with over a dozen local router signals -- even through these thick walls that even block a cell-phone signal. Bandwidth thieves are making our ISP take some steps to clean up the clutter in our area. Stupid Army.
brumby92
Aug 29, 2009 12:01 PM
go for a drive with your laptop searching for wifi (called wardriving)

you'll find plenty of completely unsecured wifi points.. Don't even need to hack any encryptions.
Comments have been disabled on this article.
 
Latest Competitions
 
Atomic Magazine

Issue: 133 | February, 2012

Atomic is a magazine aimed squarely at computer enthusiasts, gamers, and serious PC upgraders.

Every month we bring you the latest reviews of new technology and PC components, in depth features on everything from overclocking to console hacking, and gaming previews and interviews.
 
Latest Comments
 
Latest User Reviews
Battlefield 3 is the new benchmark online FPS
90%
A very fun and realistic multiplayer ride.
 
Antec Kuhler 920 - liquid cool
90%
Antec Kuhler 920 silent but effientive out of the box no maintence water cooling kit
 
Antec's Lanboy Air - our new favourite case
90%
Antec Lan boy Air in red a very cool design
 
Antec's Lanboy Air - our new favourite case
90%
This product overall is awesome.
 
MSI's GT780 laptop as fast as it gets
90%
Nice laptop
 
 
Close Get the February, 2012 issue of Atomic mailed to you for $8.95, including postage.

SubscribeBuy nowDigital Version