Dynamic WEP key on wired network

[Paul-Henri Gauzence de Lastours]

On 23/08/06, Jouni Malinen <jkmaline at cc.hut.fi> wrote:
>
> On Tue, Aug 22, 2006 at 05:16:29PM +0200, Paul-Henri Gauzence de Lastours
> wrote:
>
> > I would like to encrypt data on my wired Ethernet network, and for this
> I
> > need to activate the dynamic Wep key exchange with 802.1xauthentication.
>
> How exactly would be encrypting data here? WEP is only defined in IEEE
> 802.11 (i.e., for wireless networks) and it should not really be used
> for any new purpose due to major security problems.


Actually I don't want to use WEP, as it concerns wireless networks and as
recent works from UK dramatically reduced the time for cracking it. The
project on which I'm working already contains en encryption part using DES
with static keys. What I want to do is just to use the dynamic key exchange
mechanism without encrypting data, this work being attributed to another
application. I just need to get a key of more than 64 bits, so that
eventually after troncating it, I can use it for DES encryption. Do you
think this ca be done ?

> But I've read in the configuration file for wpa_supplicant that on a wired
> > configuration, the activation of dynamic Wep key will prevent the
> > authentication process from being successfull. Isn't there any way for
> > exchanging dynamic keys on a wired configuation ?
>
> Sure there is, but something would need to specify how the key is to be
> derived and what mechanism would be used to encrypt the data packets.
> Before those parts are resolved, there is not much point in trying to
> get wpa_supplicant to do something.
>
> --
> Jouni Malinen                                            PGP id EFC895FA
> _______________________________________________
> HostAP mailing list
> HostAP at shmoo.com
> http://lists.shmoo.com/mailman/listinfo/hostap
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.shmoo.com/pipermail/hostap/attachments/20060823/edeb2abb/attachment.htm