The following was found at http://is.gd/3P4u.
WiFi is no longer secure enough to protect wireless data.
Global Secure Systems has said that a Russian’s firm’s use of the latest NVidia graphics cards to accelerate WiFi ‘password recovery’ times by up to an astonishing 10,000 per cent proves that WiFi’s WPA and WPA2 encryption systems are no longer enough to protect wireless data.
David Hobson, managing director of GSS, claimed that companies can no longer view standards-based WiFi transmission as sufficiently secure against eavesdropping to be used with impunity. He also said that the use of VPNs is arguably now mandatory for companies wanting to comply with the Data Protection Act.
He said: “This breakthrough in brute force decryption of WiFi signals by Elcomsoft confirms our observations that firms can no longer rely on standards-based security to protect their data. As a result, we now advise clients using WiFi in their offices to move on up to a VPN encryption system as well.
“Brute force decryption of the WPA and WPA2 systems using parallel processing has been on the theoretical possibilities horizon for some time – and presumably employed by relevant government agencies in extreme situations – but the use of the latest NVidia cards to speedup decryption on a standard PC is extremely worrying.
“The $64,000 question, of course, is what happens when hackers secure a pecuniary advantage by gaining access to company data flowing across a WPA or WPA2-encrypted wireless connection. Will the Information Commissioner take action against the company concerned for an effective breach of the Data Protection Act.”
My Thoughts :
These guys used the massive parallel processing in Nvidia’s GTX200 series graphics cards to accomplish this, and all with freely available software; Nvidia drivers and the CUDA SDK. That’s right. I would imagine that this was done with a pair of GTX280’s most likely in SLI mode. Not only does this underly the immense power, flexibility and number crunching power of Nvidia’s latest high end graphics cards, who ever thought this was even a remote possibility? Anyone that runs a wireless access point/router in their home as I do should continue to use the highest level of signal encryption available. Most wireless-n routers are compatible with WPA/WPA2. Keep using it. I don’t think anyone such as I and yourself will be in any danger for a period of time. Should this be released in the wild (as of writing this blog post I’m not sure) that’s when we all should worry but I think this will be aimed more at the enterprise then home users, again for a time.