4

If someone wanted to get the passphrase for my WPA2 encrypted Wi-Fi access point (AP), would it be possible to set up a fake AP with the same MAC address and SSID, then when a device tries to log into the malicious AP, the malicious AP listens for my key, thus giving the operator of the malicious AP my key?

If this is possible, how can I protect myself from this kind of attack?

Improve this question
4
  • In short yes, move authentication away from the router
    – 50-3
    Sep 14, 2013 at 23:25
  • So, FreeRADIUS? I'm not sure what options are out there.
    – Paul
    Sep 14, 2013 at 23:48
  • There are a lot of solutions out there and hopefully get somegood answers, I know of ~6 commercial solutions we use at work (6 sites with different configuration ) and come Monday I might put something together if there isn't much content generated by then
    – 50-3
    Sep 15, 2013 at 0:00
  • Given the answer you accepted I think I miss interpreted your question the owner of the malicious AP doesn't know you Key correct?
    – 50-3
    Sep 16, 2013 at 3:17

1 Answer 1

Reset to default
4

Nope. WPA2's four-way handshake allows both the client and the AP to prove to each other that they both know the shared key, without either revealing to the other (or to eavesdroppers) what the shared key actually is.

The insecurities of WEP had been such a debacle and black eye for both the IEEE 802.11 working group as well as the Wi-Fi Alliance, that the IEEE made damn sure that 802.11i got proper attention from cryptographers. WPA2 is just a Wi-Fi Alliance certification and logo program guaranteeing industry interoperability of the best parts of 802.11i.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .