Turbo-charged wireless hacks threaten networks
By John Leyden, the register.uk.co
Posted in Enterprise Security
The latest graphics cards have been used to break Wi-Fi encryption far quicker than was previously possible. Some security consultants are already suggesting the development blows Wi-Fi security out of the water and that corporations ought to apply tighter VPN controls, or abandon wireless networks altogether, in response.
Russian firm ElcomSoft has applied GPU acceleration technology to its password recovery tool to allow PCs or servers running supported NVIDIA video cards to break Wi-Fi encryption up to 100 times faster than is possible by using conventional microprocessors. Recovery times for Wi-Fi keys are increased by a factor between 10 to 15 in the use of Elcomsoft Distributed Password Recovery in combination with a regular laptop featuring NVIDIA GeForce 8800M or 9800M series GPUs.
By running the same software on a desktop with two or more NVIDIA GTX 280 boards installed, this figure increases to a factor of 100.
We've known for years that the previous generation of wireless encryption, WEP, was vulnerable to brute force attack. The infamous compromise of TJX, which resulted in the compromise of at least 45.7m credit card records, has been traced back to a hack in a weak security retail network with older point of sale terminals running WEP.
Elcomsoft advance makes WPA and WPA2 encryption open to attack. In fact, the software is specifically designed to support "passport recovery" on Wi-Fi networks running either WPA or the newer WPA2 encryption.
The software needs to intercept only a few packets in order to perform a brute force attack, where a huge number of possible passwords are tried in an attempt to stumble upon the correct code. ElcomSoft positions the tool as a means of auditing corporate Wi-Fi networks for inappropriately weak passwords.
The firm is also marketing its technology to forensic and government agencies, as well as data and password recovery services.
The raw horsepower of graphics chips, normally used as 3D graphic accelerators by gamers, can also be applied for a variety of other number-crunching password-breaking uses beyond uncovering WiFi passwords. Elcomsoft Distributed Password Recovery can also be used to recover Windows startup passwords, crack MD5 hashes, and unlock password-protected documents created by Microsoft Office or PDF files created by Adobe Acrobat, according to ElcomSoft.
More about Elcomsoft's tool can be found here http://wifi.elcomsoft.com/
Security agencies have demonstrated the use of plasma TV components in password cracking. High performance FPGA (Field Programmable Gate Array) chips were applied to crack standard GSM transmissions in as little as 30 seconds, during a demonstration by security researchers Steve Mueller and David Hulton at Black Hat in Washington back in February.
Although government agencies have probably applied similar approaches for some time the programming of FPGA is a tricky process, involving getting to grips with a specialist hardware programming language. Elcomsoft's approach by contrast relies on off-the-shelf software and readily available components.
Security consultancy Global Secure Systems said that the development means Wi-Fi networks - even those running the latest encryption algorithm - can no longer be considered to be secure.
"This breakthrough in brute force decryption of Wi-Fi signals by Elcomsoft confirms our observations that firms can no longer rely on standards-based security to protect their data," said GSS managing director David Hobson. "As a result, we now advise clients using Wi-Fi in their offices to move on up to a VPN encryption system as well.
"Brute force decryption of the WPA and WPA2 systems using parallel processing has been on the theoretical possibilities horizon for some time - and presumably employed by relevant government agencies in extreme situations - but the use of the latest NVidia cards to speedup decryption on a standard PC is worrying."
Hobson added that the development could spur a step back from wireless to wired network connection in sensitive installation, such as financial services organisations, particularly concerned about data privacy.
---EOF----
I guess I will start linking topics, tutorials, and links to this subject matter, feel free to help out.
DNR
Cracking passwords with Graphic cards (article)
Cracking passwords with Graphic cards (article)
-
He gives wisdom to the wise and knowledge to the discerning. He reveals deep and hidden things; he knows what lies in Darkness, and Light dwells with him.
He gives wisdom to the wise and knowledge to the discerning. He reveals deep and hidden things; he knows what lies in Darkness, and Light dwells with him.
-
Big-E
- Administrator
- Posts: 1332
- Joined: 16 May 2007, 16:00
- 16
- Location: IN UR ____ , ____ING UR _____ .
- Contact:
A graphics card can also be referenced as a GPU - Graphics Processing Unit. Essentially, it`s an entire processor dedicated and streamlined to the processing of graphic related content opposed to general, everyday computations. What this company is doing is using the processing power of the GPU to crack algorithms pertaining to encryptions. They also did a similar thing to harnessing the power of GPU with the folding@home project.Lyecdevf wrote:How does a graphics card help to break a password?Sounds fascinating though!
http://folding.stanford.edu/English/FAQ-ATI
FPGA
More specifically it is the Field Programmable Gate Array Chip in the TV,
A field-programmable gate array is a semiconductor device containing programmable logic components called "logic blocks", and programmable interconnects. Logic blocks can be programmed to perform the function of basic logic gates such as AND, and XOR, or more complex combinational functions such as decoders or mathematical functions. In most FPGAs, the logic blocks also include memory elements, which may be simple flip-flops or more complete blocks of memory.
A hierarchy of programmable interconnects allows logic blocks to be interconnected as needed by the system designer, somewhat like a one-chip programmable breadboard. Logic blocks and interconnects can be programmed by the customer or designer, after the FPGA is manufactured, to implement any logical function—hence the name "field-programmable".
http://en.wikipedia.org/wiki/Field-prog ... gate_array
Download this PDF Using FPGAs to Parallelize Dictionary Attacks for Password Cracking
here:
http://www2.computer.org/portal/web/csd ... S.2008.484
(this is the same one they tried to sell me for $29 here: http://ieeexplore.ieee.org/articleSale/ ... er=4439185 )
Other links re:cracking and FPGA hacking
http://www.altera.com/products/devkits/ ... arter.html
http://www.cl.cam.ac.uk/~rnc1/descrack/DEScracker.html
http://www.clubhack.com/2007/files/David-FPGA.pdf
http://www.theregister.co.uk/2008/04/30/fpga_hacking/
DNR
A field-programmable gate array is a semiconductor device containing programmable logic components called "logic blocks", and programmable interconnects. Logic blocks can be programmed to perform the function of basic logic gates such as AND, and XOR, or more complex combinational functions such as decoders or mathematical functions. In most FPGAs, the logic blocks also include memory elements, which may be simple flip-flops or more complete blocks of memory.
A hierarchy of programmable interconnects allows logic blocks to be interconnected as needed by the system designer, somewhat like a one-chip programmable breadboard. Logic blocks and interconnects can be programmed by the customer or designer, after the FPGA is manufactured, to implement any logical function—hence the name "field-programmable".
http://en.wikipedia.org/wiki/Field-prog ... gate_array
Download this PDF Using FPGAs to Parallelize Dictionary Attacks for Password Cracking
here:
http://www2.computer.org/portal/web/csd ... S.2008.484
(this is the same one they tried to sell me for $29 here: http://ieeexplore.ieee.org/articleSale/ ... er=4439185 )
Other links re:cracking and FPGA hacking
http://www.altera.com/products/devkits/ ... arter.html
http://www.cl.cam.ac.uk/~rnc1/descrack/DEScracker.html
http://www.clubhack.com/2007/files/David-FPGA.pdf
http://www.theregister.co.uk/2008/04/30/fpga_hacking/
DNR
-
He gives wisdom to the wise and knowledge to the discerning. He reveals deep and hidden things; he knows what lies in Darkness, and Light dwells with him.
He gives wisdom to the wise and knowledge to the discerning. He reveals deep and hidden things; he knows what lies in Darkness, and Light dwells with him.