What is the best encryption

goodnetwork · 01-21-2005

Hi guys,

I am installing my wireless system with DLINK 54 mbs AP and I am wondering which is the best encryption ?

Is it WPA ? If it is, should I make a 128bit encryption or 256bit encryption ? Does it slow done the network to have a 256bit ?

Thorn · 01-21-2005

The question is too generic. Best encryption for what purpose? General WiFi? Other questions which come into play: What Operating System(s)? Home, SOHO, Forturne 500 business, or mil-spec use?

Assumng for the moment that it's just Home/SOHO use, that you're using Windows and that all your equipment supports it, then yes, WPA would be the best choice.

By the way, you posted this in the NetStumble Forum ("NetStumbler: Questions and configuration information about the NetStumbler software".)This question has nothing to do with NetStumbler, and should be in one of the more general areas such as Windows or Unix/Linx.

nashr · 01-21-2005

Quote:

Originally Posted by goodnetwork

Hi guys,

I am installing my wireless system with DLINK 54 mbs AP and I am wondering which is the best encryption ?

Is it WPA ? If it is, should I make a 128bit encryption or 256bit encryption ? Does it slow done the network to have a 256bit ?

Being an old-timer like Thorn

I still prefer good old ROT13. Unfortunately I haven't found a good wifi implemention of this. Has anyone encountered a good product using this?

scdako · 01-22-2005

I don't understand why (unless you have very sensitive data or whatever) if you have just a basic home network to share internet, files, printers, etc. why everyone is concerned with what encryption is best. In my opinion as long as you have some encryption no body is going to try and hack into it, because there is likely lots more around that are unsequred. Why would anyone want to hack your encrypted connection when there is lots around that are unecrypted unless they just want to do it for thrills, but even then whats the chances they pick yours. Put any encryption on and in my opinion your connection should be safe.
this is just my take on things, someone else might disagree.

goodnetwork · 01-24-2005

Thanks all of you for your comment.

I got a Wireless AP Dlink 54mbs and 2 laptops and 1 normal computer. All should be connected on the wireless and I just want that a kid of the building try to hack my personal file for fun as it can be easily done these days.

I agree with u scdako but the risk that somebody use all my internet bandwith or use my private files (bank etc.) is very low but this is something I dont want to take the risk.
I guess WPA is the best but what about the amounts of bits, 64, 128 or 256bits ?

Should it take more time to break a network of 256 bits than a 128 bits ? Do I loose any speed with the 256 bits.

Sorry to put this post in Netstumbler, can somebody move it to Windows ?

goodnetwork · 01-24-2005

Any idea what I should knowing that I care much about security ?

Thorn · 01-24-2005

Quote:

Originally Posted by goodnetwork

Any idea what I should knowing that I care much about security ?

Look here: FAQ: WiFi Security

goodnetwork · 01-24-2005

Always use encryption (WEP or WPA) on your wireless network. If possible, use a 128-bit or higher variation.
* Whenever possible, use additional encryption such as SSL or VPN.

It does not say if it slow down the network... Can u pls help ?

How long does somebody takes to brake in a 128bit network ? Longer than on a 64 bits ?

rjdenver · 01-24-2005

Quote:

Originally Posted by goodnetwork

Always use encryption (WEP or WPA) on your wireless network. If possible, use a 128-bit or higher variation.
* Whenever possible, use additional encryption such as SSL or VPN.

It does not say if it slow down the network... Can u pls help ?

How long does somebody takes to brake in a 128bit network ? Longer than on a 64 bits ?

Seems to depend on the method used to encrypt, the method used to break, and luck.

WEP, with its weaknesses, takes less time to break than WPA. My own experience was that WEP 128 took 3 hours, whille 64 took 5 seconds. But that was after generating 8 hours worth of traffic.

Given the 'luck' factor, I'm not sure you can make a definitive statement - except that none of these is ever 100% secure.

RjDenver

goodnetwork · 01-24-2005

Ok... This means that I will encrypt with 256 bits because really 3 hours + 8 hours is really nothing !!! Too dangerous as I share the file over the network.

How can somebody get this 500k of packets in only 8 hours ??? This is very fast no ? I heard it takes days to have 500k of packets.

rjdenver · 01-24-2005

Quote:

Originally Posted by goodnetwork

Ok... This means that I will encrypt with 256 bits because really 3 hours + 8 hours is really nothing !!! Too dangerous as I share the file over the network.

How can somebody get this 500k of packets in only 8 hours ??? This is very fast no ? I heard it takes days to have 500k of packets.

My tests are probably pretty unrealistic for real-life, and were more academic for my own interests. I did this on my own network, so I could dedicate processes to generating all that traffic local to me. If someone is just browsing the sports news in the evenings, it could be weeks before generating all the traffic that would make the most common attacks practical. You could frustrate those even more by changing the keys before too much traffic was generated.

RjDenver

wrzwaldo · 01-24-2005

Quote:

Originally Posted by goodnetwork

Ok... This means that I will encrypt with 256 bits because really 3 hours + 8 hours is really nothing !!! Too dangerous as I share the file over the network.

How can somebody get this 500k of packets in only 8 hours ??? This is very fast no ? I heard it takes days to have 500k of packets.

I suppose some type of packet injection would do the trick...

goodnetwork · 01-25-2005

Start to be interesting... How would u do to inject packets in the Wireless network ?

wrzwaldo · 01-25-2005

Quote:

Originally Posted by goodnetwork

Start to be interesting... How would u do to inject packets in the Wireless network ?

Sorry that's all the further I'm going with it.

goodnetwork · 01-25-2005

Ok no prob.

I think I will do the test this WE.

I will do a 64 bit encryption and try to crack it in just a WE.

01-21-2005	#1 (permalink)
goodnetwork Registered Member Join Date: Jan 2005 Posts: 7	What is the best encryption Hi guys, I am installing my wireless system with DLINK 54 mbs AP and I am wondering which is the best encryption ? Is it WPA ? If it is, should I make a 128bit encryption or 256bit encryption ? Does it slow done the network to have a 256bit ?

01-21-2005	#2 (permalink)
Thorn Did you do the math? Join Date: Apr 2002 Location: Villa Straylight Posts: 10,099	The question is too generic. Best encryption for what purpose? General WiFi? Other questions which come into play: What Operating System(s)? Home, SOHO, Forturne 500 business, or mil-spec use? Assumng for the moment that it's just Home/SOHO use, that you're using Windows and that all your equipment supports it, then yes, WPA would be the best choice. By the way, you posted this in the NetStumble Forum ("NetStumbler: Questions and configuration information about the NetStumbler software".)This question has nothing to do with NetStumbler, and should be in one of the more general areas such as Windows or Unix/Linx. __________________ Thorn "I'm The Doctor. I'm a Time Lord. I am from the planet Gallifrey in the constellation Kasterborous. I'm 903 years old and I am the man who is going to save your lives and all 6 billion people on the planet below... You got a problem with that?" Last edited by Thorn : 01-21-2005 at 07:14 AM. Reason: typos

01-24-2005	#5 (permalink)
goodnetwork Registered Member Join Date: Jan 2005 Posts: 7	Thanks all of you for your comment. I got a Wireless AP Dlink 54mbs and 2 laptops and 1 normal computer. All should be connected on the wireless and I just want that a kid of the building try to hack my personal file for fun as it can be easily done these days. I agree with u scdako but the risk that somebody use all my internet bandwith or use my private files (bank etc.) is very low but this is something I dont want to take the risk. I guess WPA is the best but what about the amounts of bits, 64, 128 or 256bits ? Should it take more time to break a network of 256 bits than a 128 bits ? Do I loose any speed with the 256 bits. Sorry to put this post in Netstumbler, can somebody move it to Windows ? Last edited by goodnetwork : 01-24-2005 at 02:23 AM.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

01-22-2005	#4 (permalink)
scdako Geek Join Date: Dec 2004 Location: St. Thomas/ Ontario/ Canada Posts: 63	I don't understand why (unless you have very sensitive data or whatever) if you have just a basic home network to share internet, files, printers, etc. why everyone is concerned with what encryption is best. In my opinion as long as you have some encryption no body is going to try and hack into it, because there is likely lots more around that are unsequred. Why would anyone want to hack your encrypted connection when there is lots around that are unecrypted unless they just want to do it for thrills, but even then whats the chances they pick yours. Put any encryption on and in my opinion your connection should be safe. this is just my take on things, someone else might disagree.

01-24-2005	#6 (permalink)
goodnetwork Registered Member Join Date: Jan 2005 Posts: 7	Any idea what I should knowing that I care much about security ?

01-24-2005	#8 (permalink)
goodnetwork Registered Member Join Date: Jan 2005 Posts: 7	Always use encryption (WEP or WPA) on your wireless network. If possible, use a 128-bit or higher variation. * Whenever possible, use additional encryption such as SSL or VPN. It does not say if it slow down the network... Can u pls help ? How long does somebody takes to brake in a 128bit network ? Longer than on a 64 bits ?

01-24-2005	#10 (permalink)
goodnetwork Registered Member Join Date: Jan 2005 Posts: 7	Ok... This means that I will encrypt with 256 bits because really 3 hours + 8 hours is really nothing !!! Too dangerous as I share the file over the network. How can somebody get this 500k of packets in only 8 hours ??? This is very fast no ? I heard it takes days to have 500k of packets.

01-25-2005	#13 (permalink)
goodnetwork Registered Member Join Date: Jan 2005 Posts: 7	Start to be interesting... How would u do to inject packets in the Wireless network ?

01-25-2005	#15 (permalink)
goodnetwork Registered Member Join Date: Jan 2005 Posts: 7	Ok no prob. I think I will do the test this WE. I will do a 64 bit encryption and try to crack it in just a WE.