Wireshark-users: Re: [Wireshark-users] Questions about the latest release
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Gerald Combs <gerald@xxxxxxxxxxxxx>
Date: Wed, 07 Feb 2007 16:53:49 -0800
Thomas Nyheim wrote:
> Firstly, how does the WPA decryption work?

If all of the following conditions are true:

  - You're using pre-shared keys
  - All 4 RSNA handshake packets are present for the session you're
    trying to decrypt
  - You've specified the proper password, password+SSID, or raw PSK

then Wireshark can determine the derived key for a WPA session and
decrypt its traffic.