Thank you so much! I decided to start learning about ALL the things we take for granted. It's amazing how many people connect, and use computers and have no idea how it works
@pearsemcguinness2472
9 жыл бұрын
At last someone who sounds like they know what they're talking about. Easy to understand when broken into their basic parts. Thanks for the clear explanation.
@googlesearches240
11 жыл бұрын
Great video thank you. You cleared this up. I was getting confused with the 4-way handshake vs EAPOL. EAPOL is similar but for enterprise setups that use Radius Servers.
@Gokul4444
9 жыл бұрын
Thank you Marcus. It would be good; if you add things about KEK, KCK, TK in this
@bharatpenumutchu6487
8 жыл бұрын
Great video!!!!! However, we need to understand how the authentication frame work works. The Key exchange (PSK, PKI, CA) , it would have been nice to dwelve on this as well......
@mahavirmahajan5035
10 ай бұрын
Hi Marcus, Thanks for this short and meaningful explanation .I have one query when user enters wrong password then at which stage it will validate this and authentication getting failed.?
@nullsemicolon
2 жыл бұрын
super good video on the subject!
@sibijohn3511
6 жыл бұрын
Thanks for the brief and precise explanation
@ianpatrick23
3 жыл бұрын
Great explanation! Thank you!
@rohitrajkumar1234
6 жыл бұрын
Thank you Marcus. Most Helpful.
@rajendrapanga68
2 жыл бұрын
Thank you
@damiaorodrigues2680
7 жыл бұрын
This was a good explanation. Thanks Marcus.
@blancavega9986
7 жыл бұрын
Great Explanation! thank you buddy!
@hetbet3879
3 жыл бұрын
Trying to figure it out, tasked with this and only 15.. hella confusing.
@ravikumar-lu2tp
4 жыл бұрын
Thanks for the well described video.. Please answer my below question. In M1 A.P sends a PMK ID to client. Will the client caches this PMKID for future use or client generates PMKID it self after M2 as I has all the required materia.
@Vidur11
4 жыл бұрын
The PMK ID is cached by the client to facilitate roaming between AP's.
@aminebrahmi8034
6 жыл бұрын
just a simple supid question , does that mean if you have the psk key (or pmk ) let's say you're on the same wireless network , does that mean you can intercept and mimic the process and get the PTK and GTK and decrypt all data communicated ?? i'm a newbie don't go harsh on me i can be stupid somtimes xDD
@kovalensue
11 жыл бұрын
Hi, i am working on bachelor thesis and i am little bit confused... You are talking about Group Temporal Key, but in other sources its Group Transient Key.
@JamesR1chards
12 жыл бұрын
Thank you Marcus
@darylallen2485
7 жыл бұрын
I found this helpful.
@bharat5845
5 жыл бұрын
Is GTK sent in plain text (?) or its privacy is protected in some ways by the PTK? Thanks
@johnangelo2000
12 жыл бұрын
Please have EAPOL as well
@sundsalharbi8817
4 жыл бұрын
Thanks
@Enneti
3 жыл бұрын
Hi, thank you for content, I have a question though! can't someone just derive someone's PTK since the anonce and snonce message are not encrypted? Doesn't anyone have access to the 5 values of everyone??
@AlisamiXploration
2 жыл бұрын
No, since the PMK is necessarily for deriving PTK and that is never shared wirelessly. (9 months later lmao)
@An.Individual
3 жыл бұрын
what protects the client from a fake AP?
@1Man2Go
8 жыл бұрын
how does the AP decrypt the snonce? it's mic protected and it hasn't generated the PTK yet
@Qbabxtra
6 жыл бұрын
A bit late but here you go: The Snonce is sent in cleartext, with the MIC tag appended to the end of the message.
@micha74741
8 жыл бұрын
The snonce is not encrypted. The Mic does only secure the integrity not the confidentiality. The only secret in this process is the pmk from the authentication server.
@jagadeesh498
6 жыл бұрын
How Does AP get PMK ( Pairwise Master Key ) When 802.1x authentication is used
@Qbabxtra
6 жыл бұрын
I'm not 100% sure, but I assume both parties derive it from the only common secret they know: The supplicants password.
@maitumbi31
6 жыл бұрын
how can I get the video
@satselva
7 жыл бұрын
GTK is not encrypted , so will it be a problem...???
@damiaorodrigues2680
7 жыл бұрын
I think GTK is sent encrypted (with PTK), according to this link: mrncciew.com/2014/08/19/cwsp-4-way-handshake/. It makes sense for it to be that way. Marcus may have just forgotten to mention that.
@Qbabxtra
6 жыл бұрын
The GTK is encrypted with the Key Encryption Key (KEK), which is one of the 3 keys the PTK is composed of.
@valuevideoz4130
6 жыл бұрын
4 way handshake simple explanation
@paul-sr8qk
4 жыл бұрын
There is always assholes in my area trying to hack my wifi you have gotta be vigilant.
@darkangelcloud7
10 жыл бұрын
kerberos dude :)
@HypnotizeCampPosse
8 жыл бұрын
was there a precursor video to this? I gained no information from watching this.
@darylallen2485
7 жыл бұрын
I'm here because I'm in training to become a better wireless network engineer. I came across this topic because the other resource I have did not explain this subject well.
@HypnotizeCampPosse
7 жыл бұрын
+Daryl Allen pointless comment ^
@darylallen2485
7 жыл бұрын
My point is that this topic makes perfect sense if you have other wireless network resources. People don't make entire video lectures on this topic for free. There probably is a precursor video, the real question is, are you ready to pay for it? I overshared about my situation to address the question of who is the target audience for a seemingly random video such as the one here. In the context of someone with multiple resources on the topic, this video is an excellent supplement. Sorry that it was not what you were looking for. Why not go to www.cwnp.com and see if you can find a complete video lecture. Considering how unhelpful it was for you to watch this, I suggest you look in the CWNA topics.
@Qbabxtra
6 жыл бұрын
Great video, unfortunately, it's oversimplifying it a bit too much. The GTK exchange is not part of the 4-way handshake, and the model he draws are thus missing two messages. For those interested, here's a more formally correct version of the 4-way handshake (4WHS): -- 1: Authenticator sends: Anonce, IDa, SQN 2: Supplicant sends: (Snonce, IDs, RSN IE, SQN) + MIC 3: Authenticator sends: (Anonoce, IDa, RSN IE, SQN +1) + MIC 4: Supplicant sends: (IDs, SQN +1) + MIC -- //Acronyms: IDa = Macaddress of authenticator // Needed to derive PTK IDs = Macaddress of supplicant //Needed to derive PTK PTK = Pariwise Transient Key SQN = Sequence number // Used to stop replay attacks RSN IE = Robust Security Network Information Element. Basically which cipher suites are supported by the entity. MIC = Message Integrity Code // Used to prove integrity of the message and authentication of the sender.
@CWNPTV
6 жыл бұрын
The GTK is transmitted during the 4WHS. The GTK exchange is used to transmit a new GTK to existing connections at a later time if required.
@michaeltaylor5939
9 жыл бұрын
Terrible. This instruction video had no structure. He couldn't stick to the subject. He kept getting off the subject by adding side notes, which made it impossible to follow.
Пікірлер: 46