d33tah / call-for-wpa3

Call for WPA3 - what's wrong with WPA2 security and how to fix it
238 stars 27 forks source link

WPA2 Krak vulnerability text #9

Open i-rme opened 7 years ago

Varbin commented 7 years ago

WPA2 itself (I mean the defined WPA2 standart) is not broken with KRACK - the implementations are. While this is because of the RFC being to broad at certain point, it can be fixed by updates in those vulnerable implementations. The "vulnerable" for-ways-handshake has been proven mathematically but, as I said, the implementations.