Is anyone else annoyed that the WPA2 KRACK paper author sat on it for >2mos before any disclosure and 5mos before public disclosure?
Show this thread
Amusingly, when I implement a protocol like this I pretty much always use an explicit state machine like that. Avoids this kind of problem.
-
-
Seems it didn't entirely avoid it though: https://ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/041_net80211_replay.patch.sig …
-
Hmm, the memcmp part of that patch of old vs new key makes me wonder if you could flip-flop between two keys by replaying packets.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.