Advertisement

There's no such thing as a stupid question, but they're the easiest to answer.
Login
Search

Advertisement

General Security General Security
Search Search
Search for:
Tech Support Guy > > >

Wep safe or not


(!)

twistedbliss's Avatar
twistedbliss twistedbliss is offline
Computer Specs
Junior Member with 4 posts.
THREAD STARTER
 
Join Date: Dec 2007
Experience: Advanced
16-Dec-2007, 07:55 AM #1
Wep safe or not
I have heard a lot of people saying wep is not a safe option for securing your wireless networking and wpa is the way to go, is wep really that unsecure?
I use a pocket pc on my network which does not support wpa so at present i am using wep with a 10 character passcode.
I also have a 500gb nas on this network is it vunerable to hacking?

Thanks for any help

Rob..
Nesjemannen's Avatar
Nesjemannen   (WrongFormat) Nesjemannen is offline
Computer Specs
Member with 204 posts.
 
Join Date: Nov 2007
Location: Norway!
Experience: Advanced
16-Dec-2007, 08:04 AM #2
I found this:

Wep vs Wpa

WEP:

Wired Equivalent Privacy. Originally intended to give you the same or similar level of security as on a wired network, but it didnít quite work out that way.

In basic laymanís terms, WEP works by using secret keys, or codes to encrypt data. The Access Point and the client must know the codes in order for it to function. It uses either 64 bit or 128 bit keys, though the added security from the larger number isnít as much as you would think.

The actual user keys (codes) are 40 bits and 104 bits, with the extra 24 bits used by something called the Intialization Vector (IV).

The encryption is created by taking the IV and randomizing it for each packet, while keeping the secret code the same. The AP and the client decrypt and retrieve the message/data and all is right in the world, in theory.

Problems:

* There is no limit on using the same IV value more than once. This makes the encryption vulnerable to collision-based attacks.
* Because the IV is only 24 bits, there are only ~16.7 million possible variations. Sounds like a lot, but itís quite small in the cryptography world.
* Master keys are used directly, when they should instead be used to generate other temporary keys.
* Users donít change their keys very often on most networks, giving attackers ample time to try various techniques.

If you have nothing else, WEP is better than nothing of course, but I wouldnít trust extremely sensitive data with it.

____

WPA:

Wifi Protected Access. It bridges the gap between WEP and the upcoming 802.11i standard, and is implementable via firmware upgrades in older hardware. WPA uses Temporal Key Integrity Protocol (or TKIP), which is designed to alow WEP to be upgraded through corrective measures that address the existing security problems.

Advantages over WEP:

* IV length has increased to 48 bits from 24 bits, which allows WPA to achieve over 500 trillion possible key combinations.
* IVs are now better protected through the use of the TSC, or TKIP sequence counter, helping to prevent the re-use of IV keys.
* Master keys are never directly used.
* Better key management
* Impressive message integrity checking

I have not gone into the Enterprise level of WPA, which is actually intended to be used with something called a RADIUS server for access control. Most home users use what is called WPA-PSK, which is for use on smaller networks that need good security without the extra cost and configuration. WPA and WPA-PSK use the same encryption methods, however.

Last edited by Nesjemannen; 16-Dec-2007 at 08:24 AM..
ferrija1's Avatar
Computer Specs
Member with 7,983 posts.
 
Join Date: Apr 2006
Location: Pittsburgh, PA
Experience: Mac Addict
17-Dec-2007, 10:54 PM #3
These days you can download programs that crack WEP encryption with the click of a button. WPA has been cracked but it is a long and hard process.
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine
WELCOME TO TECH SUPPORT GUY!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.


(clock)
THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


WELCOME
You Are Using: Server ID
Trusted Website Back to the Top ↑