Re:Key Reinstallation Attacks – Breaking WPA2 by Forcing Non...
by asclepi on Monday October 16, 2017 @07:20AM
(#15482413)
For reference, the OpenBSD patch in question released on August 30: https://ftp.openbsd.org/pub/OpenBSD/patches/6.1/common/027_n...
[ Parent
| on HN ]
Re:Key Reinstallation Attacks – Breaking WPA2 by Forcing Non...
by kodablah on Monday October 16, 2017 @11:35AM
(#15483924)
On GitHub, appears at [0] with comments coming in today at [1].
0 - https://github.com/openbsd/src/commit/2e40dd69ac29d6a858309b... 1 - https://github.com/openbsd/src/commit/cc66e8f557d6f3d4dea5ea...
Re:Key Reinstallation Attacks – Breaking WPA2 by Forcing Non...
by acqq on Monday October 16, 2017 @08:16AM
(#15482646)
tedunangst: "We asked to commit without revealing details, he said yes" "I guess he changed his mind about that after the fact."
The patch has obviously an explicit description:
"State transition errors could cause reinstallation of old WPA keys."
It's true, however, that anybody who analyzes the diffs would eventually figure that out, as Theo de Raadt argued.
My conclusion is also that the real error was even wanting to give the details to him at that moment, as there's apparently a history of him not respecting embargoes.
Re:Key Reinstallation Attacks – Breaking WPA2 by Forcing Non...
by tedunangst on Monday October 16, 2017 @10:49AM
(#15483549)
Oh, that's the problem? That's too much information? Well, shit.
Re:Key Reinstallation Attacks – Breaking WPA2 by Forcing Non...
by acqq on Tuesday October 17, 2017 @10:47AM
(#15491337)
I still fail to get what you wanted to express with your comment here. I've just quoted two sentences from another comment of yours on the same page, have you understood something else?