Different Wifi Encryptions, help?

randruff · 06-07-2005, 03:50 PM

I am familiar with WEP and its pros/cons but not so much with WPA, etc. Recently, I coated my wifi network with WPA-PSK encryption and I am wondering what/how this is different than WEP or any other encryption. What is the benefits/risks to WPA-PSK, or any other encryption besides WEP? Thanks in advance for the help!

**apj101** · 06-07-2005, 04:38 PM

Without getting to technical WPA-Password Shared Key is simply a much stroger encryption than wep, which can be cracked in about 10 min on a busy network of a few days on a less busy one. All wireless-G hardware out there has some form of WPA on it, but a firmware or driver update can get WPA on your older wireless-b equipment as well.
It is not the sole defence in your wireless network. You should disable ssid, and enable mac filtering. Turning of DCHP would be a good step too.

randruff · 06-07-2005, 07:37 PM

Thanks apj....as for your suggestions, i already have changed my SSID, default pass to access router, mac addy filtering, as well as DHCP. I did notice an option for WPA or WPA-PSK....is there a difference?

**apj101** · 06-07-2005, 07:42 PM

Different Types
WPA Radius Authentication - Your typical home user wont use this, unless you want to setup a radius server. This server works with WPA to pass different keys to each user. I'm not going to go into how to set this up.

WPA PSK - PSK stands for Pre-Shared Key and is most commonly used by home users. The user must have a certain password to enter the network. PSK can be used with either AES or TKIP, depending on what your hardware can support. It is important that you choose a strong password to prevent against dictionary attacks.

AES - An algorithm that requires special hardware support to use. It is stronger, but a firmware/driver update won't get you AES.

TKIP - This system changes the key every specified amount of time to prevent cracking attempts. You can usually adjust how often it changes in the router/AP settings. This does not mean it changes your password, just the key.

WPA2 - The new WPA standard that uses a stronger algorithm, but is not backwards compatable with older hardware.

randruff · 06-07-2005, 09:09 PM

apj, youre the man. thats for that guide, thats exactly what i was looking for. I setup my LAN with WPA-PSK encyption with TKIP. One more question....you mentioned TKIP changes the key....when my AP does change the key, is there a loss of signal or any noticable difference in my connection? Would it be a good idea to set my AP to change keys every 5 min? 10 min? hour? etc

**apj101** · 06-08-2005, 11:05 AM

Quote:

when my AP does change the key, is there a loss of signal or any noticable difference in my connection?

no

Quote:

Would it be a good idea to set my AP to change keys every 5 min? 10 min? hour? etc

i use 10 min

06-07-2005, 03:50 PM	#1 (permalink)
randruff Platinum Member Join Date: Dec 2004 Location: 30 min south of iraq....oops....Detroit. Age: 27 Posts: 742	Different Wifi Encryptions, help? I am familiar with WEP and its pros/cons but not so much with WPA, etc. Recently, I coated my wifi network with WPA-PSK encryption and I am wondering what/how this is different than WEP or any other encryption. What is the benefits/risks to WPA-PSK, or any other encryption besides WEP? Thanks in advance for the help!

06-07-2005, 04:38 PM	#2 (permalink)
apj101 Administrator Join Date: Apr 2005 Location: London Age: 26 Posts: 9,262	Without getting to technical WPA-Password Shared Key is simply a much stroger encryption than wep, which can be cracked in about 10 min on a busy network of a few days on a less busy one. All wireless-G hardware out there has some form of WPA on it, but a firmware or driver update can get WPA on your older wireless-b equipment as well. It is not the sole defence in your wireless network. You should disable ssid, and enable mac filtering. Turning of DCHP would be a good step too. __________________ What did one snow man say to the other? can you smell carrot? The fight is won or lost far away from witnesses - behind the lines, in the gym, and out there on the road, long before I dance under those lights. How you do anything, is how you do everything!

06-07-2005, 07:42 PM	#4 (permalink)
apj101 Administrator Join Date: Apr 2005 Location: London Age: 26 Posts: 9,262	Different Types WPA Radius Authentication - Your typical home user wont use this, unless you want to setup a radius server. This server works with WPA to pass different keys to each user. I'm not going to go into how to set this up. WPA PSK - PSK stands for Pre-Shared Key and is most commonly used by home users. The user must have a certain password to enter the network. PSK can be used with either AES or TKIP, depending on what your hardware can support. It is important that you choose a strong password to prevent against dictionary attacks. AES - An algorithm that requires special hardware support to use. It is stronger, but a firmware/driver update won't get you AES. TKIP - This system changes the key every specified amount of time to prevent cracking attempts. You can usually adjust how often it changes in the router/AP settings. This does not mean it changes your password, just the key. WPA2 - The new WPA standard that uses a stronger algorithm, but is not backwards compatable with older hardware. __________________ What did one snow man say to the other? can you smell carrot? The fight is won or lost far away from witnesses - behind the lines, in the gym, and out there on the road, long before I dance under those lights. How you do anything, is how you do everything!

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

06-07-2005, 07:37 PM	#3 (permalink)
randruff Platinum Member Join Date: Dec 2004 Location: 30 min south of iraq....oops....Detroit. Age: 27 Posts: 742	Thanks apj....as for your suggestions, i already have changed my SSID, default pass to access router, mac addy filtering, as well as DHCP. I did notice an option for WPA or WPA-PSK....is there a difference?

06-07-2005, 09:09 PM	#5 (permalink)
randruff Platinum Member Join Date: Dec 2004 Location: 30 min south of iraq....oops....Detroit. Age: 27 Posts: 742	apj, youre the man. thats for that guide, thats exactly what i was looking for. I setup my LAN with WPA-PSK encyption with TKIP. One more question....you mentioned TKIP changes the key....when my AP does change the key, is there a loss of signal or any noticable difference in my connection? Would it be a good idea to set my AP to change keys every 5 min? 10 min? hour? etc