An Inductive Chosen Plaintext Attack against WEP/WEP2

Talk Outline

WEP/WEP2

How to Read WEP Encrypted Traffic (1)

How to Read WEP Encrypted Traffic (2)

Observations

Inductive Chosen Plain Text

Base Case

Inductive Step

Inductive Step

Inductive Step

After Response

Attack Cost

WEP Costs

WEP2 Costs

This Attack Works

Stopping/Mitigating the Attack

Conclusions