WPA2-PSK - yintoni na? Uhlobo Ukhuseleko WPA2-PSK

Wireless uqhagamshelwano LAN ngoku ayikwazi kubizwa ngokuba into ngaphandle zesiqhelo. Noko ke, abaninzi, abasebenzisi (ingakumbi nabanini izixhobo mobile) sijongene ingxaki uhlobo inkqubo yokhuseleko kusetyenziswa: WEP, WPA, okanye WPA2-PSK. Loluphi uhlobo lobugcisa, ngoku sibona. Noko ke, ingqalelo ezininzi ziya kuhlawulwa kuyo WPA2-PSK, ekubeni le nokwabela ngoku ithandwa kakhulu.

WPA2-PSK: Yintoni na?

Masithi ngoko nangoko: le nkqubo ukukhuselwa kwawo nawaphi na wengingqi ukudibanisa kumsebenzi womnatha wireless esekelwe kwi WI-Fi. Kuba iinkqubo igxunyekwe ngokusekelwe amakhadi womnatha ukuba kusebenzise ukudibana ngqo nge le Ethernet, kuba awungeni ndawo.

ukhuseleko WiFi-network usebenzisa iteknoloji WPA2-PSK ngoku i "phambili" kakhulu. Nkqu ezinye iindlela lixesha ukuba zifuna ufaka igama eligqithisiweyo yophando, kwakunye ebandakanya ufihlo lwe data zibuthathaka ulwamkelo kunye transmission, khangela, ukuba bathi, prattle ubuncinane zobuntwana. Nantsi nto.

ukhuselo eziphilayo

Masiqalise nesibakala sokuba kube kutshanje i ikhuselekileyo technology uqhagamshelo khuselo ingqalelo isakhiwo WEP. Isetyenziswa yi iqhosha ukuthembeka kunye uqhagamshelwano wireless kunye naluphi devaysa kuye IEEE 802. 11i.

WiFi-network yokhuseleko WPA2-PSK isebenza mgaqo phantse ngokufanayo, kodwa lijonga iqhosha lofikelelo lwenzeka kwinqanaba 1x 802.. Ngamanye amazwi, le nkqubo nokutshekishwa zonke Ukrainian lunee ntlobo kunokwenzeka.

Noko ke, kukho iteknoloji entsha, ekuthiwa WPA2 Enterprise. Ngokungafaniyo ne WPA, inika nje kuphela iqhosha lofikelelo lobuqu isicelo, kodwa ke ubukho Radius umncedisi Ukuvumela. Enanikade okunjalo ungqinisiso algorithm enokuqhutywa ngexesha elinye ngeendlela ezininzi (umz, Enterprise kunye PSK, ngaloo ukuba inqanaba encryption AES CCMP inxaxheba).

ukhuselo Basic nemigaqo yokhuseleko

Njengoko ngokunjalo esishiya elidlulileyo, iindlela zokhuseleko mihla zisebenzisa protocol efanayo. It TKIP (inkqubo yokhuseleko WEP esekelwe uhlaziyo lwesoftwe kunye algorithm RC4). Konke oku kubonisa iqhosha igalelo yethutyana ukufikelela kwinethiwekhi.

Njengoko wabonisa kanjani ngokoqobo, kukodwa algorithm okhethekileyo uqhagamshelo olukhuselekileyo zothungelwano wireless lunganikelwanga. kuqala, WPA, WPA2 uze, zincediswa kunye PSK (ufikelelo iqhosha lobuqu) kunye TKIP (temporal Key): Le nto sele ziphuhlisiwe ubuchwepheshe obutsha. Ukongeza, apha yayifakwe ufihlo lwe data ngexesha wokwamkelwa transmission, namhlanje eyaziwa ngokuba standard AES.

technology ephelelwe

Ukhuseleko Uhlobo WPA2-PSK yi esanda. Ngaphambi koku, njengoko kutshiwo ngasentla, sisebenzisa inkqubo WEP ngokusebenzisana TKIP. Protection TKIP akukho nto iyenye, njengendlela yokwandisa khiye bit. Ngoku kukholelwa ukuba isitshixo basic indlela ikuvumela ukuba sikhule amasuntswana-40 ukuya 128 ziintanda. With konke oku, unako kwakhona ukutshintsha iqhosha WEP omnye ezahlukeneyo eliqela esabangela waza wathumela ngokuzenzekelayo yi umncedisi, adala uqinisekiso lomsebenzisi kufako lwegama.

Ukongeza, le nkqubo iquka ukusetyenziswa uluhlu engqongqo zokusasaza eziphambili, kunye nolwazi-nkqubo ukuze lokuyigxotha le ebizwa ngokuba ingxaki nakwiingqikelelo ezenziwayo. Ngamanye amazwi, xa, umzekelo, kuba uthungelwano kweengcingo esisebenzisa ukhuseleko WPA2-PSK, isikhiya acaciswe uhlobo "123456789" ngokulandelelana, akukho nzima mabaqashele ukuba iinkqubo ezifanayo, ezivelisa ezingundoqo kunye passwords, ezibizwa ngokuba KeyGen okanye into elolo hlobo, xa ufaka dijithi ezine zokuqala nga ngokuzenzekelayo ukujikelezisa emine ezayo. Apha, njengoko besithi, akukho mfuneko yokuba ibe nguye kuphela ukuthelekelela udidi bokulandelelana esetyenzisiweyo. Kodwa mhlawumbi sele zingqondwe ncam, umzekelo zilula.

Ke ukuba umhla wokuzalwa umsebenzisi password, noko kuxoxwe. Wena kalula ibalwe idatha yobhaliso efanayo networks lwentlalo. Ngokwabo password yamanani elolu hlobo ayini ngokupheleleyo. Kungcono usebenzise, kunye manani, iileta, nemiqondiso (nokuba kunokwenzeka okungaprintwayo olunikiweyo reference iindibaniso izitshixo "shushu"), kunye nendawo. Noko ke, le ndlela, ngokuhlaziya WPA2-PSK ukuthwala. Apha kuyimfuneko ukuba achaze indlela yokusebenza kwenkqubo.

Gumbini Access Algorithm

amagama ngoku ambalwa malunga WPA2-PSK System. Yintoni na ngokwemiqathango bangazisebenzisa? Yeyona indibanisela ubuchule ezininzi, ngoko ukuthetha, kwimo yokusebenza. Makhe ukucacisa imeko umzekelo.

Ngokusesikweni, ukulandelelana iinkqubo ukubulawa ukukhusela uqhagamshelwano kunye khowudi ulwazi ezosulela okanye unikwe ngolu hlobo lulandelayo:

WPA2-PSK (WPA-PSK) + TKIP + AES.

Kulo mzekelo, apha indima engundoqo edlalwa liqhosha ekwabelwana (PSK) oko 8 ukuya 63. Ziziphi uhlobo ngokulandelelana algorithms (nokuba ufihlo na eyenzeka kuqala, okanye emva ukugqithiselwa, nokuba inkqubo usebenzisa intermediates random isitshixo, njalo njalo. D.) baya kuchaphazeleka, akunamsebenzi.

Kodwa phambi yokhuseleko kunye nenkqubo ufihlo kwinqanaba AES 256 (wayebhekisela bit iqhosha elizinyelisiweyo) kusiko WPA2-PSK ngenxa imigewu, abanobuchule kulo mba, kuya kuba umsebenzi, nangona kunzima, kodwa kunokwenzeka.

ukuba sengozini

Emva ngo-2008, xa kwinkomfa PacSec wanikwa bubuchule evumela ukuba zizame uqhagamshelwano wireless uze ufunde data ezosulela ukusuka umzila ukuya terminal client. Kwathatha malunga 12-15 imizuzu. Noko ke, ivale postback (Client umzila) ayiphumelelanga.

Inyaniso kukuba xa imo QoS umzila, awukwazi kuphela ukufunda ulwazi zesini, kodwa endaweni kulo fake. Ngo-2009, izazinzulu Japanese asinikezele iteknoloji evumela ukunciphisa ixesha elinye ikhefu ngcaciso imfutshane. Kwaye ngo-2010 kwakukho ulwazi malunga Web kukuba le ndlela elula singene umnqongo 196 Hole ndikho WPA2, usebenzisa iqhosha yayo labucala.

Malunga naluphi na uphazamiseko kwi izitshixo ezenziwe nje ukuthetha. Okokuqala into ebizwa ngokuba yi-ukuhlasela magama, zidibene ne "ezingenangqondo-amandla", kunye nendawo wireless koko ziskenwe ukuba ganga ngoku iipakethi adlulisele nokurekhodwa kwazo ezilandelayo. Kwanele kumsebenzisi ukwenza uqhagamshelwano, njengalo kwenzakala igunya iimbalelwano okokuqala transmission ipakethe (ukuxhawula). iyafuneka Emva koko, nokuba ukufumana endhawini yo ingongoma eyintloko yokufikelela. Uyakwazi cwaka ukusebenza kwimo intanethi. Kodwa ke, ukwenza zonke ezi zenzo kuya kufuneka software eyodwa.

Indlela ukuzivula WPA2-PSK?

Ngenxa yezizathu ezicacileyo, kukho algorithm epheleleyo ngokwaphula uxhulumaniso akayi kunikwa kuba zingasetyenziswa njenge uhlobo isikhokelo kwisenzo. Nikela kuphela iingongoma eziphambili, uze emva koko - kuphela ngokubanzi.

Ngokuqhelekileyo, ukufikelela ngqo umzila inokujikwa ibe ebizwa ngokuba yi-imowudi Airmon-NG lokulandelela inkqubo yezithuthi (airmon-ng ukuqala wlan0 - ukuthiya ngokutsha a adaptha kweengcingo). Emva koko, lo nokuhlutha kunye nitrogen zenzeka kunye umyalelo yendlela airdump-ng mon0 (itshaneli data tracking rate beacon, isantya kunye indlela lofihlo, ixabiso lwedata ezosulela njalo-njalo. D.).

Ngaphezu koko iyasebenza umyalelo ekhethiweyo nitrogen channel, apho umyalelo na igalelo Aireplay-NG Deauth kunye neenqobo ezinxulumeneyo (ukuba aziveli ngenxa yezizathu lokubalwa zokusetyenziswa ndlela).

Emva koko (xa umsebenzisi sele kudlule ububhali xa uqhagamshela) umsebenzisi akanokukwazi qhawula uqhagamshelwano nje kwi-network. Kulo mzekelo, xa kwakhona abangena ukusuka hacks kwicala kwisistim ukuphinda ugunyaziso igalelo, emva koko kuya kuba lula ukuba ganga ngoku onke amagama okugqitha. Okulandelayo window khona 'izandla »(ukuxhawula). Wena ke isicelo ukuphehlelelwa fayile WPAcrack ezizodwa eziya zonakalisa nayiphi password. Ngokuqhelekileyo, njengoko kwalo start-up, yaye akukho namnye uya kumxelela nabani na. Siphawula kuphela ukuba kukho ulwazi oluthile yonke le nkqubo ithabatha ukusuka imizuzu emininzi iintsuku eziliqela. Umzekelo, Intel kwinqanaba kumqhubekekisi ukusebenza wesiqhelo clock nezihlandlo GHz 2.8, ekwaziyo ukuphatha akukho ngaphezu kwama-500 amagama agqithisiweyo yesibini nganye, okanye 1.8 million ngeyure nganye. Ngokubanzi, kucacile, asimele masingazikhohlisi.

endaweni yokuba UYobi

Kuko konke oko uza WPA2-PSK. Yintoni na, mhlawumbi, ukufunda lokuqala icacile kwaye ayiyi kubakho. Noko ke, iziseko wokhuseleko data kunye neenkqubo ufihlo ezisetyenzisiweyo, ndiyacinga, ukuqonda nabani. Ngaphezu koko, namhlanje, senze oku phantse bonke abanikazi elektroniki mobile. Ukhe waqaphela ukuba xa uyila uqhagamshelwano entsha inkqubo efanayo phone smart inikeza ukusebenzisa uhlobo oluthile zokhuseleko (WPA2-PSK)? Abantu abaninzi nje musa anikele ingqalelo kuso, kodwa ndabulaleka. In the izilungiselelo ungasebenzisa abaliqela ezongeziweyo iparameters ukuze kuphuculwe ukhuseleko.