Aren’t they still just encrypted against the password itself? So if it is a publ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		UniverseHacker on Oct 29, 2024 \| parent \| context \| favorite \| on: The sins of the 90s: Questioning a puzzling claim ... Aren’t they still just encrypted against the password itself? So if it is a public place like a coffee shop with a known password, anyone can decrypt the data?

SAI_Peregrinus on Oct 31, 2024 [–]

No, the password just allows key exchange to start. Every client has its own session key.

UniverseHacker on Nov 2, 2024 | [–]

It appears that in practice this isn't implemented well and there are tools like Wireshark that let you intercept data from other users on WPA.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact