[LUAU] WPA or WPA2?

[Jim Thompson]

On Feb 28, 2008, at 5:49 AM, jonr at destar.net wrote:

> Quoting Kristian Erik Hermansen <kristian.hermansen at gmail.com>:
>
>> On Wed, Feb 27, 2008 at 3:46 PM,  <jonr at destar.net> wrote:
>>> I have a friend who setup a wireless network using wpa2 and he asked
>>> me how he could tell for sure he is using wpa2. After searching for
>>> awhile and not finding what I was looking for I am asking here. I  
>>> know
>>> there are some really knowledgeable wireless people down there. I
>>> won't mention any names but their initials are Jim Thompson. :)
>>
>> There are many ways.  Check out any wifi sniffing tools.  kismet,
>> airsniff, airsnort, aircrack, netstumbler, etc...
>> --
>> Kristian Erik Hermansen
>> --
> Thanks Kristian, I was hoping I wouldn't have to install anything  
> just to verify that simple question.

WPA2 is a product certification that is available through the Wi-Fi  
Alliance. WPA2 certifies that wireless equipment is compatible with  
the IEEE 802.11i standard. The WPA2 product certification formally  
replaces Wired Equivalent Privacy (WEP) and the other security  
features of the original IEEE 802.11 standard. The goal of WPA2  
certification is to support the additional mandatory security features  
of the IEEE 802.11i standard that are not already included for  
products that support WPA.

The only way that the sniffing tools can tell that you're running  
802.11i (WPA2) it by looking in the beacons (or probe responses) for  
Information Elements (IEs) that advertise TKIP (WPA) or CCMP (WPA2).

So if the sniffing tools say you're running WPA2 (or 802.11i, or CCMP  
(AES), then its likely that you are, but...

its not perfect.

Jim