[LEDE-DEV] KRACK (Key Reinstallation Attacks), now patched upstream in hostapd

[Koen Vandeputte]

On 2017-10-16 11:48, Nick Lowe wrote:
> Referencing https://www.krackattacks.com/
>
> Patches can be found at: https://w1.fi/security/2017-1/ and an
> advisory at http://seclists.org/oss-sec/2017/q4/83
>
> Patches can also be found committed at https://w1.fi/cgit/hostap/log/
>
> I think we need to get these patches integrated in to LEDE asap, or
> move to the hostapd development branch where there are currently
> committed.
I'm currently updating my patch-in-transit to incorporate these fixes.
http://patchwork.ozlabs.org/patch/823136/

> A "Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2" paper is
> available from: https://papers.mathyvanhoef.com/ccs2017.pdf
>
> Best regards,
>
> Nick
>
> _______________________________________________
> Lede-dev mailing list
> Lede-dev at lists.infradead.org
> http://lists.infradead.org/mailman/listinfo/lede-dev