Web Hack List

Collected research

All Your Biases Belong to Us: Breaking RC4 in WPA-TKIP and TLS

Newly found statistical biases in the RC4 keystream make plaintext recovery practical against real protocols. An attacker who can have a secret repeatedly encrypted recovers an HTTPS session cookie with 94 percent success from roughly 9 times 2^27 ciphertexts in 75 hours, and breaks WPA-TKIP inside an hour by generating identical packets and deriving the MIC key.

Record

Researcher
Mathy Vanhoef and Frank Piessens
Published by
usenix.org
Topic
Crypto

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of Mathy Vanhoef and Frank Piessens, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .