On Mon, 25 Mar 2002, Colin McKinnon wrote:
> Approximately half the dvices which will be connected will be printers - 
> I guess that there's some mechanism of updating the keys on the wireless
> printservers.....

Possibly, but it will be via WEP-protected network. Changing a symmetric
key via the encrypted channel is a bad idea: it was one of the methods by
which Bletchley Park were able to crack Enigma (airforce traffic, if
memory serves). I still have difficulty believing what a hash they made of
WEP.

Making the best of a bad situation, you could try changing the key quite
often (~order 1 day), at pseudo random times, to try and catch "Eve" out.  
There's also the problem of a printer missing the key-change (from being
switched off).

This is all assuming the printers do have the facility for remote key
management.

It all sounds like a bit of a nightmare.

Good luck!

Paul.

------------------------------------------------------------------------------
Paul Millar                            yo-yo, n. :
Particle Physics Theory Group              Something that is occasionally
Department of Physics and Astronomy        up but normally down.
University of Glasgow,                     (see also Computer)
Glasgow G12 8QQ,                                       [EMAIL PROTECTED]
Scotland                                               +44 (0)141 330 4717
------------------------------------------------------------------------------

--------------------------------------------------------------------
http://www.lug.org.uk                   http://www.linuxportal.co.uk
http://www.linuxjob.co.uk               http://www.linuxshop.co.uk
--------------------------------------------------------------------

Reply via email to