News for hackers. Stuff that matters.
Re:“Alexa, what is my WiFi password?” by est31 on Saturday April 01, 2023 @09:54AM (#35400317)
> you can also derive all other devices' pairwise session keys from the password hash as well, i.e. intercept their traffic.

Note that deriving keys in a passive fashion only works with WPA2. With WPA3 SAE you must do an active Man in the Middle attack, which means also that you need to possess the key at the time of the handshake. With WPA2 you can decrypt any historic traffic you have recorded.

There are no comments on this comment yet.