Re: [Mip4] dynamic keys

[Henrik Levkowetz <henrik at levkowetz.com>]

Jeremy,

Wednesday 11 February 2004, Jeremy A. Greene wrote:
> But, more importantly, there's a concern in the 802.11, wpa area that
> touches on this:
> http://wifinetnews.com/archives/002452.html 

No, there's no real similarity here.  The concern in this article is
that it uses a broken procedure to generate a temporary session key,
resulting in eavesdropping being possible, and goes on to discusses
offline attacks on the passphrase.  Offline attacks on an authenticating
password/username combination is not that relevant in a bootstrap
scenario where you only use a specific username/password combination
once, and any repeated use will be blocked.

	Henrik

Attachment: pgp00084.pgp
Description: PGP signature