🐲

WPA3 — SAE Handshake

Medium

Free preview · 2 of 5 steps

WPA2's vulnerability: offline dictionary attacks

In WPA2, the 4-way handshake includes a MIC (Message Integrity Code) computed from the password-derived PMK. An attacker can capture this handshake (or force a deauth to trigger a new one) and run offline dictionary attacks — trying millions of passwords per second with GPUs.

WPA3-SAE (Simultaneous Authentication of Equals) — based on the Dragonfly protocol — eliminates this entirely.

Packets in motion — click to inspect:

1 / 2

Space to play/pause · ← → to step