WEP is uncrackable under these conditions:
If your pass-phrase is > 21 characters, whoever plans to crack your wireless AP or wireless router better have mad patient skills.
In the paper "Practical Attacks Against WEP & WPA" the authors emphasize that the PSK key
has to be "weak" in order for this to work at the begining of the paper; in addition, to the fact that the clients must be using WPA+TKIP to associate to the AP or wireless router .
However, In 2003 Robert Moskowitz of ISCA Labs detailed the potential problems of deploying weak passwords/passphrases with WPA in his paper: "Weakness in Passphrase Choice in WPA Interface," where Moskowitz points out that a short passphrase < 21 characters is susceptible to a dictionary attack.
Furthermore, I also thought that this was an interesting statement at the end of the paper: " Practical attacks against
WEP and WPA,"- "Our attack on TKIP in Section 5 shows that even WPA with a "strong" password is
not 100% secure and can be attacked in a real world scenario."
So one would have to ask, how long was the password/passphrase they tested in their paper "Practical attacks against
WEP and WPA."
And how long will it take to crack a passphrase that is greater than 21 characters, especially in Cynicalpsycho's case where the passphrase has a combination of alphanumeric characters+space+and other random symbols.
Maybe a lab is in order , never mind will never happen, I use WEP with a passphrase > 21 characters. Patiently waiting for someone to hack my AP/Router never going to happen, maybe I will be lucky and get hacked via my web browser or some zero-day vulnerability for one of my unpatched applications.
Mac filtering is silly if you want to secure you router this could help in combination with other strong security measures; however, if you think just using this with your AP/Router open, this might be a bad idea.
Solution: regardless if you plan to filter you MAC's or not, you can use WPA or WEP, just make sure you have a strong pass-phrase not a password.
Tools to test you newly created pass-phrase:
Video sucks, you can just Google Gerix Wifi Cracker on Youtube for a live demo, we went from typing commands to crack WEP/WPA to using scripts, now we are using GUI driven tools on Linux :-).
Or try this:
Only requirement: Gerix runs on Linux or Windows if you are into virtualization and whatnot.
Happy testing people, and stay secure...