How deeply does Hacking Cryptography cover WEP?

Traces packet construction, RC4 KSA and PRGA states, FMS equations, Go implementation, and traffic-volume effects.

WEP

WEP is an obsolete wireless-network security standard that used RC4-based encryption and was vulnerable to cryptographic attacks.

WEP is an obsolete Wi-Fi security standard that combines a preshared key with a public initialization vector (IV) to form per-packet RC4 keys. Its RC4 usage lets attackers recover the original Wi-Fi password by sniffing encrypted traffic. section 4.3 section 4.3.2

Each packet exposes a three-byte IV and encrypts data with RC4 using IV || PSK. The recipient reconstructs the same key, but weak IVs trigger biases in RC4’s key-scheduling algorithm. section 4.3.2

A simulated recovery

A Go test encrypts packets with the PSK "helloworld123" and recovers the same key byte by byte. Reducing the message volume from 50,000 to 500 produces incorrect bytes, showing that the statistical attack depends on sufficient traffic.

How Hacking Cryptography covers it

liveBook manning.com

Read Hacking Cryptography on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Acing the CCNA Exam: Volume 2 Advanced Networking and SecurityWEP is an obsolete IEEE 802.11 wireless security protocol that provides authentication, confidentiality, and integrity through a shared static key and RC4 encryption.

Compare how 2 books explain WEP →

Related concepts

RC4uses · RC4 is a stream-cipher algorithm that generates a pseudorandom keystream from a variable-length secret key using a permutation-based internal state.
WPAalternative to · WPA is a family of wireless security standards and protocols that protect communications between Wi-Fi devices and access points.
encryptionimplements · Encryption is the cryptographic transformation of readable data into ciphertext to conceal its contents, reversible through decryption with appropriate information.
authenticationuses · Authentication is the process of establishing or verifying the identity of a user, service, device, or other communicating entity.
data integrityimplements · Data integrity is the property that data remains accurate, complete, consistent, and valid, with changes made only through authorized actions.
TKIPincludes · TKIP is a wireless security protocol that uses per-packet key mixing and integrity checks to improve the security of WEP-compatible hardware.

This explainer was generated by Manning's knowledge graph from the text of Hacking Cryptography. The section links point to the parts of the book it draws on.