[Olsr-dev] "Secure" Mesh networks

[Henning Rogge]

On Tue February 9 2010 01:16:14 John Barrett wrote:
> OK -- just looked over that code -- and its getting close :)
> 
> I think I have everything in place to flash a couple of routers -- I'll
> make sure I get the secure module in the build and see if it still works
> as is, then probably base my work off that code :)
Just a warning about the "secure" plugin. The only thing it does it to use a 
shared secret to calculate a hash value and put it into each packet (plus a 
timestamp against replay attacks). You can get more security by just 
encrypting your Layer 2 with a symmetric key (not WEP because it's broken).

I think that WPA supplicant should support some static shared key for WPA(2) 
in linux, but I'm not sure.

Henning Rogge

-- 
Diplom-Informatiker Henning Rogge , Fraunhofer-Institut für
Kommunikation, Informationsverarbeitung und Ergonomie FKIE
Kommunikationssysteme (KOM)
Neuenahrer Straße 20, 53343 Wachtberg, Germany
Telefon +49 228 9435-263,   Fax +49 228 9435 685
mailto:(spam-protected) http://www.fkie.fraunhofer.de
GPG: E1C6 0914 490B 3909 D944 F80D 4487 C67C 55EC CFE0
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.olsr.org/pipermail/olsr-dev/attachments/20100209/022d0e86/attachment.sig>