ACM Home Page
Please provide us with feedback. Feedback
Intercepting mobile communications: the insecurity of 802.11
Full text PdfPdf (182 KB)
Source International Conference on Mobile Computing and Networking archive
Proceedings of the 7th annual international conference on Mobile computing and networking table of contents
Rome, Italy
Pages: 180 - 189  
Year of Publication: 2001
ISBN:1-58113-422-3
Authors
Nikita Borisov  UC Berkeley
Ian Goldberg  Zero-Knowledge Systems
David Wagner  UC Berkeley
Sponsor
SIGMOBILE: ACM Special Interest Group on Mobility of Systems, Users, Data and Computing
Publisher
ACM  New York, NY, USA
Bibliometrics
Downloads (6 Weeks): 52,   Downloads (12 Months): 322,   Citation Count: 84
Additional Information:

abstract   references   cited by   index terms   collaborative colleagues  

Tools and Actions: Request Permissions Request Permissions    Review this Article  
DOI Bookmark: Use this link to bookmark this Article: http://doi.acm.org/10.1145/381677.381695
What is a DOI?

Warning: The download time has expired please click on the item to try again.


ABSTRACT

The 802.11 standard for wireless networks includes a Wired Equivalent Privacy (WEP) protocol, used to protect link-layer communications from eavesdropping and other attacks. We have discovered several serious security flaws in the protocol, stemming from mis-application of cryptographic primitives. The flaws lead to a number of practical attacks that demonstrate that WEP fails to achieve its security goals. In this paper, we discuss in detail each of the flaws, the underlying security principle violations, and the ensuing attacks.


REFERENCES

Note: OCR errors may be found in this Reference List extracted from the full text article. ACM has opted to expose the complete List rather than only correct and linked references.

 
1
W. A. Arbaugh. An inductive chosen plaintext attack against WEP/WEP2. IEEE Document 802.11-01/230, May 2001.
 
2
W. A. Arbaugh, N. Shankar, and Y. J. Wan. Your 802.11 wireless network has no clothes. http://www.cs.umd.edu/~waa/wireless.pdf, Mar. 2001.
 
3
A. Beck. Netscape's export SSL broken by 120 workstations and one student. HPCwire, Aug. 22 1995.
 
4
S. M. Bellovin. Problem areas for the IP security protocols. In 6th USENIX Security Symposium, San Jose, California, July 1996. USENIX.
 
5
B. Braden, D. Borman, and C. Partridge. Computing the internet checksum. Internet Request for Comments RFC 1071, Internet Engineering Task Force, Sept. 1988.
 
6
Core SDI. crc32 compensation attack against ssh-1.5. http://www.core-sdi. com/soft/ssh/attack.txt, July 1998.
 
7
E. Dawson and L. Nielsen. Automated cryptanalysis of XOR plaintext strings. Cryptologia, (2):165-181, Apr. 1996.
 
8
D. Doligez. SSL challenge virtual press conference. http://pauillac.inria.fr/~doligez /ssl/press-conf.html, 1995.
 
9
R. Jueneman, S. Matyas, and C. Meyer. Message authentication. IEEE Communications Magazine, 23(9):29-40, Sept. 1985.
 
10
S. Kent and R. Atkinson. Security architecture for the Internet Protocol. Internet Request for Comment RFC 2401, Internet Engineering Task Force, Nov. 1998.
 
11
P. Kocher. Cryptanalysis of Diffie-Hellman, RSA, DSS, and other cryptosystems using timing attacks. In D. Coppersmith, editor, Advances in cryptology, CRYPTO '95: 15th Annual International Cryptology Conference, Santa Barbara, California, USA, August 27-31, 1995: proceedings, pages 171-183. Springer-Verlag, 1995.
 
12
 
13
H. Krawczyk, M. Bellare, and R. Canetti. HMAC: Keyed-hashing for message authentication. RFC 2104, Feb. 1997.
 
14
T. Mallory and A. Kullberg. Incremental updating of the internet checksum. Internet Request for Comments RFC 1141, Internet Engineering Task Force, Jan. 1990.
 
15
L. M. S. C. of the IEEE Computer Society. Wireless LAN medium access control (MAC) and physical layer (PHY) specifications. IEEE Standard 802.11, 1999 Edition, 1999.
 
16
R. L. Rivest. The RC4 Encryption Algorithm. RSA Data Security, Inc., Mar. 12, 1992. (Proprietary).
 
17
18
 
19
D. Simon, B. Aboba, and T. Moore. IEEE 802.11 security and 802.1X. IEEE Document 802.11-00/034r1, Mar. 2000.
 
20
 
21
 
22
W. Tutte. FISH and I, 1998. A transcript of Tutte's June 19, 1998 lecture at the University of Waterloo.
 
23
D. Wagner and B. Schneier. Analysis of the SSL 3.0 protocol. In Proceedings of the 2nd USENIX Workshop on Electronic Commerce (EC-96), pages 29-40, Berkeley, Nov. 18-21 1996. USENIX Association.
 
24
J. R. Walker. Unsafe at any key size; an analysis of the WEP encapsulation. IEEE Document 802.11-00/362, Oct. 2000.

CITED BY  84

Collaborative Colleagues:
Nikita Borisov: colleagues
Ian Goldberg: colleagues
David Wagner: colleagues