[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: airport / pcmcia ?



On Mon, 20 Aug 2001, Andrew Sharp wrote:

> Which is better than no encryption, hello.  Also, the key size is
> not fixed but only depends on how you set it up.  A key size of 40
> bits prevents casual sniffing of your "conversations" while not
> adding significant cost to the parts.  A key size of 128 bits
> prevents any timely cracking of your network traffic, and access
> points with that capability are ~$250.  SMC makes a decent one.

Hardly. The way RC4 is used in the WEP scheme is flawed - the key schedule
can be easily followed, eventually leading to the actual key used. And of
course, the keys are static. It doesn't take long to determine the key,
either. So basically, WEP provides the illusion of security, but if you
actually have something going across the wireless net that someone really
wants, it's not hard for them to get it. Use IPsec or SSH or SSL with
strong crypto if it's important to you - WEP isn't going to help if
someone really cares about it.

Derrik Pates      |   Sysadmin, Douglas School   |    #linuxOS on EFnet
dpates@dsdk12.net |     District (dsdk12.net)    |    #linuxOS on OPN



Reply to: