Re: Not enough weak keys

Also, it is highly impractical to eliminate all of the weak ivs. It would
require way too much overhead on the card. I'm guessing that they only
exclude Ivs that are vulnerable to the baseline (A + 3, N - 1, X) attack.
This only eliminates ~ 255 ivs for each key byte, so it is still highly
possible to crack using the weak iv attack. I know that most of the new
prism2 based cards that do weak iv filtering implement it with the baseline
and I've been able to pick up non-baseline ivs, it just requires more
collection time and cracking time.

-h1kari


On 11/22/02 16:27, "M. Warner Losh" <[email protected]> wrote:

> In message: <[email protected]>
>           Jason Xie <[email protected]> writes:
> : I recently talked to Cisco and Symbol SE that provide
> : tech support to my company's wireless infrastructure.
> : They both boasted that the latest Cisco and Symbol APs
> : do not generate weak IVs, making WEP cracking using
> : Airsnort or Airtools practically impossible.  Anyone
> : knows if that's true?  Or any success story to share?
> 
> brute force is still possible, even without weak keys.