WEP Key Recovery Help Documentation
Contents

WEP Key Recovery Help Documentation

 
Frequently Asked Questions


Q. I'm trying to recover a 128-bit key. I've collected 80,000 packets, but WEPKR failed to recover the key. What should I do?
A. Recovering a WEP key is about probability. 80,000 packets are not sufficient in many cases. One of the most important factors is the number of unique initialization vectors (IVs) in the collected packets. 80,000 packets may contain 100% unique IVs or 50% unique IVs. This cannot be predicted. Also, even 80,000 unique IVs cannot guarantee success. So the best thing to do is to collect more packets by monitoring the WLAN for a longer period of time or by using the method described in the Traffic Generation chapter. Collect 160,000 packets and click Action => Start key recovery now to initiate a new key recovery session. If this doesn't work, collect 300,000 packets.

Q. I'm trying to recover a key, one hour has passed, but the key has not been recovered yet.
A. First, make sure that you have a fast CPU. Recovering a WEP key on something like Pentium II-400 may take days. An Intel Core 2 Duo 3.16 GHz CPU will recover a 128-bit key within approximately 20 minutes.

Q. I've collected a few hundred thousand packets using the traffic generation method described in this help file, but WEPKR failed to recover the key. What should I do?
A. Be sure to check the Assume high percentage of ARP traffic box in the Options dialog. The key recovery method for ARP traffic is different from the one used for "natural" traffic, so you need to "tell" the application how the traffic was generated.