Key Reinstallation Attacks – Breaking WPA2 by Forcing Nonce Reuse

Re:Key Reinstallation Attacks – Breaking WPA2 by Forcing Non... by sinuhe69 on Monday October 16, 2017 @06:01AM (#15482067)

Can I use MAC whitelisting to mitigate the attack?

[ Parent | on HN ]

Re:Key Reinstallation Attacks – Breaking WPA2 by Forcing Non... by makomk on Monday October 16, 2017 @06:14AM (#15482128)

Not really. As far as I can tell, the attack basically requires spoofed MACs anyway because the keys are derived in part from the MACs, so whitelisting won't get you much benefit if any at all.

[ Parent | on HN ]

Re:Key Reinstallation Attacks – Breaking WPA2 by Forcing Non... by billpg on Monday October 16, 2017 @06:45AM (#15482273)

No. You can't even use MAC white-listing to prevent unauthorized devices from connecting to your access point.

[ Parent | on HN ]

Re:Key Reinstallation Attacks – Breaking WPA2 by Forcing Non... by eptcyka on Monday October 16, 2017 @06:09AM (#15482101)

MACs are easily spoofed.

[ Parent | on HN ]

Re:Key Reinstallation Attacks – Breaking WPA2 by Forcing Non... by d15b0ff178b085c on Monday October 16, 2017 @06:14AM (#15482130)

Nope,

This will fool your client (eg: your phone) to connect to it, before it reaches your access point, then forward packets to your AP (basic man in the middle).

On the other hand, I am wondering if it manages to correctly forward packages back to the AP if that has MAC filtering on...

[ Parent | on HN ]

Re:Key Reinstallation Attacks – Breaking WPA2 by Forcing Non... by Tepix on Monday October 16, 2017 @07:45AM (#15482517)

Only against an incompetent fool.

[ Parent | on HN ]