[LINK] RFC: Easier Security for SMEs and Consumers

[Scott Howard]

On Sun, Oct 27, 2013 at 3:42 PM, Rick Welykochy <rick at vitendo.ca> wrote:

> "great as Wi-Fi Arial, cracks wep in like 20 mins, cant do wpa/wpa2 psk
> gave it
> like 12hrs on each program no luck"
>
> Strange. I agree that wpa is much more difficult to crack, but I was
> under the impression that wep can be got at within seconds, since the
> underlying encryption scheme is so weak.
>

It depends on the volume of traffic on the network, and whether you want
the cracking to be passive or not.

On an actively used network, you're talking at best minutes if you want to
be passive, possible (much) more. If you choose to actively send certain
packets during the cracking, then you're potentially talking minutes, maybe
less.

If there's no traffic on the network (eg, no clients connected) then it's
basically impossible.

That said, one of the comments says "They have huge library. if code is
found in the library then you can use it." so it's possible this is just
plain and simple brute force attempts of common passwords, not true
"cracking".

  Scott