Key Reinstallation Attacks – Breaking WPA2 by Forcing Nonce Reuse

Re:Key Reinstallation Attacks – Breaking WPA2 by Forcing Non... by claudius on Monday October 16, 2017 @06:47AM (#15482282)

That’s like saying that prior to introducing seatbelts, we should have allowed for a period of time to glue people to their seats because it is preferable to have a mitigation they can apply themselves than a fix the manufacturer has to put in.

If you don’t limit mitigation to "a config setting" (and why would you?!), a patch/new version is the best mitigation you can get.

[ Parent | on HN ]

Re:Key Reinstallation Attacks – Breaking WPA2 by Forcing Non... by Xylakant on Monday October 16, 2017 @07:28AM (#15482438)

I limit mitigation to a config setting because that’s what affected clients can do in this case. Everyone patching wpa_supplicant on their android handset is just not going to happen and it takes time for vendors to roll out patches.

[ Parent | on HN ]