Key Reinstallation Attacks – Breaking WPA2 by Forcing Nonce Reuse

Re:Key Reinstallation Attacks – Breaking WPA2 by Forcing Non... by rightos on Monday October 16, 2017 @12:42PM (#15484572)

Does this resolve the issue on the AP side of things? Could I theoretically have an AP update that would resolve this with no need to update clients?

[ Parent | on HN ]

Re:Key Reinstallation Attacks – Breaking WPA2 by Forcing Non... by pritambaral on Tuesday October 17, 2017 @12:32AM (#15488674)

Both APs and clients need to be patched[0]. Mitigations are possible on AP side if no updates are available[1].

[0]: "Finally, although an unpatched client can still connect to a patched AP, and vice versa, both the client and AP must be patched to defend against all attacks!"

[1]: "you can try to mitigate attacks against routers and access points by disabling client functionality (which is for example used in repeater modes) and disabling 802.11r (fast roaming)."

[ Parent | on HN ]

Re:Key Reinstallation Attacks – Breaking WPA2 by Forcing Non... by tesseract on Monday October 16, 2017 @01:31PM (#15485036)

Unfortunately no, from what I understand this is primarily an attack against clients.

[ Parent | on HN ]

Re:Key Reinstallation Attacks – Breaking WPA2 by Forcing Non... by rightos on Monday October 16, 2017 @01:38PM (#15485091)

Ah yes, I see now that the patch is actually to wpa_supplicant.

Well, hopefully this means no kernel patch will be needed.

[ Parent | on HN ]