mailing list archives
Re: CVE-2012-4366: Insecure default WPA2 passphrase in multiple Belkin wireless routers
From: Jakob Lell <jakob () jakoblell com>
Date: Mon, 19 Nov 2012 17:50:56 +0100
On 19/11/12 17:28, nauty.me04 () gmail com wrote:
Jakob whart difference would it make to use a OCLhashcat with rainbow tables for simply cracking the key?
The problem with rainbow tables for WPA2-PSK is that a rainbow table can
only be created for one specific network name (ESSID). The default
wireless network configured by Belkin has a network name such as
"Belkin.34cb". Having this additional three or four hex digits means
that one had to create 4096 or 65,536 different rainbow tables with each
of them containing a large percentage of the 2^32 possible keys. While
this may in theory be feasible, creating the rainbow tables would
require a significant amount of computation power and storage.
Given the fact that the key can be calculated solely based on the
publicly visible mac address (BSSID) of the wireless network (with some
minor variations between the different router models), doing the actual
brute force is not required to crack the key.
Why would the hacker make such a hard attempt to crack the key. Can't this be stripped down to simple brute force