SOHO Security. It all started in June 2004 as the IEEE 802.11TGi group validated 802.11i which supports CCMP/AES encryption. The only difference with WPA is the encryption algorithm. WPA and WPA2 use the PSK authentication method.
PSK has many names e.g. WPA/WPA-passphrase, WPA/WPA2-PSK, WPA/WPA2-Preshared key but the correct interpretation given by WiFi-Alliance is WPA/WPA2-Personal.
The PSK is 256bit or 64hex characters but since there is no way to remember 64 hex characters we use the so-called passphrases which range from 8~63 characters.
The PSK is very important in the whole process as it is used in the 4-Way Handshake to encrypt your data.
The formula that converts passphrases to PSK is as follows:
Example
https://www.wireshark.org/tools/wpa-psk.html
SSID=pentestlibrary
passphrase=iguru1234
PSK=7c419f3316447a6da887db99f5bc43470ad4f312a0ebd45ca1aacd6aec0dd6eb
What does all this mean for our security?
e.g. passphrase=pent$tELzQq! (2.5 * 12+12bits security)=42 bits entropy and again I am not safe. Recommended is 20 characters and mixed case.
And as I told you in the PSK type above, because the SSID also plays a role, you would do well to set something more robust and avoid the Default and use WPA2/CCMP-AES!
iGuRu.gr will occasionally publish the articles of our friend Taso_X. The articles will be published only so that you can perform security tests on your network. So the purpose is anything but malicious. iGuRu.gr does not support the malicious use of its publications in any way.Knowledge has never been a crime.
