Weaknesses in the Key Scheduling Algorithm of RC4
By S. Fluhrer, I. Mantin, Adi Shamir. ACM Symposium on Applied Computing, 2001
1,304 citations recorded by the source corpus.
Subfields: Artificial Intelligence
View Paper: https://www.semanticscholar.org/paper/52178069e647e0418b79cec4a9dfa1074afe1681
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
In Artificial Intelligence
- Adrian Perrig
- Dawn Song
- Jean-Pierre Hubaux
- Brent Waters
- David A. Wagner
- Dan Boneh
- Nicholas Carlini
- Florian Tramèr
Citations in the corpus
- SWATT: softWare-based attestation for embedded devices (2004, background): “Known attacks exist against the RC4 stream cipher [5].”
- Practical attacks against WEP and WPA (2009, background): “The .rst version of the IEEE 802.11 standard supported a basic mechanism for protecting such networks named Wired Equivalent Privacy (WEP).”
- Security in mobile ad hoc networks: challenges and solutions (2004, background): “These attacks are based on the fact that the initial output in the RC4 key stream is disproportionally affected by a small number of key bits, particularly the prefix and postfix parts of the key [23].”
- Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2 (2017, background): “After researchers showed thatWired Equivalent Privacy (WEP) was fundamentally broken [30, 65], the IEEE offered a more robust solution in the 802.”
- The TESLA Broadcast Authentication Protocol (2002, methodology): “The full analysis of this issue is described in [ FMS01 ].”
- Intrusion Detection in 802.11 Networks: Empirical Evaluation of Threats and a Public Dataset (2016, positive): “1) FMS Attack: The FMS attack [23] was the first documented successful attempt to derive the WEP Shared Key, by taking advantage of a vulnerability on the key scheduling algorithm of the RC4 stream cipher.”
- Using the Fluhrer, Mantin, and Shamir Attack to Break WEP (2002, methodology): “Fluhrer, Mantin, and Shamir describe a passive ciphertext-only attack against RC4 as used in WEP [4].”
- Security and Cooperation in Wireless Networks (2007, background): “It is known that there exist so-called weak RC4 keys [142].”
- TinySec: a link layer security architecture for wireless sensor networks (2004, background): “However, security researchers quickly found WEP to be thoroughly flawed [12, 20, 38, 42]: its 24-bit IVs are too short; the CRC checksum fails to protect integrity; and, naive use of the IV to diversify RC4’s key enables devastating cryptanalytic related-key attacks.”