27 Aug 2009
Japanese researchers claim to have found a way to break the Wi-Fi Protected Access (WPA) encryption system used in wireless routers in just 60 seconds.
Toshihiro Ohigashi of Hiroshima University and Masakatu Morii of Kobe University plan to explain their method at a technical conference on 25 September in Hiroshima.
The attack potentially gives hackers a way to read encrypted traffic sent between computers and certain types of routers that use the WPA encryption system.
The fact that WPA could be broken has been known for some months, but the researchers have exploited a theoretical attack and made it practical.
An earlier technique, developed by researchers Martin Beck and Erik Tews, worked on a smaller range of WPA devices and took between 12 and 15 minutes.
Both attacks work on WPA systems that use the Temporal Key Integrity Protocol (TKIP) algorithm.
The WPA standard was originally designed as an interim encryption method as Wi-Fi security was developing, and has long since been superseded by WPA2. However, a fair bit of WPA with TKIP kit is still in use.
Newer WPA2 devices that use the stronger Advanced Encryption Standard algorithm remain safe for now.
Latest stories from Security
Related articles
Related jobs
Poll
Are you confident that the UK's IT infrastructure is secure from attack in the wake of the Flame malware revelations?
V3 examines the key strengths and weaknesses of Samsung's latest iPhone killer
Connect with V3.co.uk
Social networking is almost ubiquitous. This white paper examines the benefits and risks and it looks at the different ways companies can reconcile them
The importance of understanding your infrastructure
Contract Systems Administrator, Southampton My...
PHP Web Developer required to join my market-leading...
Java Developer x2, Spring, Hibernate, Swindon, £40K...
As part of a major implementation of a new inventory...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
Devices need to support WPA2
So many devices, even ones less than one year old, do not support WPA2. The routers have been supporting WPA2 for couple years now. But that capability is useless if none of your devices can connect. I have a couple wireless music/video players, the 2 year old one supports WEP, but the 4 year old one doesn't support wireless security at all. My 5 year old pcmcia laptop adapter can only support WEP. Playstations are very popular, but still only support WEP. People with music players, Playstations and the such are stuck using WEP or no security at all.
Posted by: Sdw162006 28 Aug 2009