Subscribe via feed.

Apple’s Airport security: Saferwep

Posted by deepquest on November 3, 2003 – 5:44 pm

Improve the security of WiFi networks using Apple’s Airport Base Station,It allows you to periodically rotate your WEP key to make it harder to crack.

The package consists of a master and client. The master sets the base station password periodically to something new. The new password is based on a SHA1 hash of the date and a shared secret. The client simply displays what the current key is. The readme file is *much* more detailed than this page.

It’s based on the Airport Base Station Configurator so SaferWep should work with the same range of products.
The key is currently generated by taking a shared password and computing a SHA1
hash of the password with the current system date. The current scheme generates
keys that are good for only the current day based on my naive assumption that it
would take longer than a day of sniffing to get a 104-bit WEP key. If this is a
silly assumption then the software should be modified to allow for creating keys
based on the hour of the day as well.

CURRENT KEY CREATION METHOD

sharedSecret = “thePassword”
currentDate = “2003-8-28”
sha1(sharedSecret + currentDate) = ca7e452415af92df50ebb4d0d8d59b5817b41a00
The 104-bit key would be ca7e452415af92df50ebb4d0d8
The 40-bit key would be ca7e452415af9

Download binaries [url=http://wirerimmed.com/files/2003/11/02/13/58/06/saferwep0.3.tar.gz]SaferWep 0.3[/url] or [url=http://wirerimmed.com/files/2003/11/02/13/58/06/saferwepsrc0.3.tar.gz][/url] [url=http://wirerimmed.com/files/2003/11/02/13/58/06/saferwepsrc0.3.tar.gz]sourcecode.[/url]


This post is under “OSX security tools” and has no respond so far.
If you enjoy this article, make sure you subscribe to my RSS Feed.

Post a reply

You must be logged in to post a comment.