Re: Who is interested in wireless cards for the Adelaide IETF meeting?

2000-03-09 Thread Matt Holdrege

At 04:08 PM 3/4/00 -0500, Marcus Leech wrote:
Bill Sommerfeld wrote:
 
 
  I hope the 128 bit "gold" cards use a longer IV..
 
  - Bill
Does anyone know if the 128-bit variant of WEP is openly specified anywhere?

The last I heard RC4 was owned by RSA and not exactly open. But I do have a 
PDF file describing Lucent's WEP implementation a layer above RC4, so it 
covers some of the key management details. If you really need it, let me 
know. Also you can read the encryption section of 802.11

With the spinoff of the Enterprise portion of Lucents business, will the
   128-bit variant quietly die?  I hope not (assuming that it's any good, of
course).

Certainly not. But as someone else mentioned, there are U.S. laws or 
regulations restricting sales of 128-bit encryption overseas. So I kind of 
doubt it will be enabled on the base stations in Adelaide. But I suppose 
you can purchase such cards in the U.S. and they will work fine in Adelaide 
with encryption turned off.

As for pricing, note that the price for the cards that will be sold in 
Adelaide are in Australian dollars which are valued quite differently than 
U.S. dollars.

Disclaimer: I am neither a lawyer or a crypto expert. Nor do I work in the 
Wavelan division of Lucent. I'm just lamely trying to help.




Re: Who is interested in wireless cards for the Adelaide IETF meeting?

2000-03-04 Thread Bill Sommerfeld

 This is the same card as an Apple Airport. It is 802.11 DS, 11Mbps, and
 supports Wire Equivalent Privacy (WEP). The idea here is that you need a key to
 get on the network, but once you're on you can see all the traffic "on the
 wire" that you care to. The Apple software only lets you set a 40 bit key
 (actually what you do is enter a passphrase that is hashed down to 40 bits),
 but I believe a 64 bit key is supported by the underlying hardware. 

[Warning...  gory crypto details enclosed.  I'm not a cryptographer,
just a protocol engineer who uses the stuff every now and then..]

I haven't found specs for the "128"-bit WEP supported by the turbo
cards, but the standard version of WEP (which I believe is what's
implemented by the Silver cards) uses RC4 with a 64 bit key but
roughly 40 bit effective strength.

RC4 is a stream cipher -- it generates a pseudo-random bitstream which
then gets XOR'ed with the plaintext.  If two (or more) packets share
the exact same keystream, there are various cryptanalytic techniques
which can be used to easily extract plaintext from one or both of
them.  (among other things, this is why reusing a one time pad is so
dangerous).  It's also usually very easy to inject chosen plaintext
into a low-level network component, which makes keystream recovery
even easier.

So, to address this within WEP, 24 bits of the 64 bit packet key are
used as an "initialization vector"; they're chosen different for each
packet and are sent in the clear in the WEP header; the remaining 40
bits are a secret shared by the nodes in the network.

However you still run into the "two time pad" problem if IV's are
reused, which will definitely occur by the time 2**24 packets have
been sent through the network using a given key (and may occur much
sooner depending on how IV's are chosen).

I hope the 128 bit "gold" cards use a longer IV..

- Bill



Re: Who is interested in wireless cards for the Adelaide IETF meeting?

2000-03-04 Thread Garrett Wollman

On Sat, 04 Mar 2000 09:36:47 +, RJ Atkinson [EMAIL PROTECTED] said:

 By the way, FreeBSD, OpenBSD, and NetBSD all have device drivers for
 the Lucent WaveLAN PCMCIA cards according to their respective web
 sites.

And thus also for other vendors' badge-engineered Lucent cards (e.g.,
Cabletron).

-GAWollman
(writing today as [EMAIL PROTECTED])

--
Garrett A. Wollman   | O Siem / We are all family / O Siem / We're all the same
[EMAIL PROTECTED]  | O Siem / The fires of freedom 
Opinions not those of| Dance in the burning flame
MIT, LCS, CRS, or NSA| - Susan Aglukark and Chad Irschick



Re: Who is interested in wireless cards for the Adelaide IETF meeting?

2000-03-04 Thread Valdis . Kletnieks

On Sat, 04 Mar 2000 09:36:47 GMT, RJ Atkinson said:
 The difference between Silver and Gold is the quality of the crypto supported,
 by the way.  In AU, it appears that Gold cards are available for sale only to 
financial
 institutions or government-related institutions.

Is there an issue with either (a) Australian nationals buying them offshore
and importing them for their personal/company use or (b) non-Australian
nationals bringing them with them for use while in the company?

Or are they merely only being marketed to those two groups?

Valdis Kletnieks
Operating Systems Analyst
Virginia Tech



Re: Who is interested in wireless cards for the Adelaide IETF meeting?

2000-03-03 Thread Steven M. Bellovin

In message [EMAIL PROTECTED], [EMAIL PROTECTED] writ
es:

 
 This is the same card as an Apple Airport. It is 802.11 DS, 11Mbps, and
 supports Wire Equivalent Privacy (WEP). The idea here is that you need a key 
 to
 get on the network, but once you're on you can see all the traffic "on the
 wire" that you care to. The Apple softare only lets you set a 40 bit key
 (actually what you do is enter a passphrase that is hashed down to 40 bits),
 but I believe a 64 bit key is supported by the underlying hardware. I don't
 know what the underlying crypto is -- probably DES, which of course means
 the key length is really only 56 bits...

It's RC4, so the key length can be any integral number of bytes.

--Steve Bellovin




Re: Who is interested in wireless cards for the Adelaide IETF meeting?

2000-02-14 Thread Dorian Kim

On Tue, Feb 15, 2000 at 12:57:57PM +1030, Mark Prior wrote:
 The package being offered is a WaveLAN IEEE Turbo 11Mbps PC card for
 AU$276.36 (approx US$175). Drivers are available from Lucent for (at
 least) Windows 95, 98, NT, CE, 2000, MacOS and Linux.
 
 Could people that are interested please send expressions of interest
 to [EMAIL PROTECTED] so I can let Lucent know how many cards are
 needed.

I'd be interested in borrowing a pair of wavelan cards.

-dorian



Re: Who is interested in wireless cards for the Adelaide IETF meeting?

2000-02-14 Thread Dorian Kim

On Mon, Feb 14, 2000 at 10:31:16PM -0500, Dorian Kim wrote:
 I'd be interested in borrowing a pair of wavelan cards.

*sigh*

apologies for not watching the cc: line. 

-dorian



Who is interested in wireless cards for the Adelaide IETF meeting?

2000-02-14 Thread Mark Prior

Lucent will be making available 802.11 DS wireless technology for the
forthcoming meeting in Adelaide. They have offered a similar deal to
Nortel at the last meeting where IETFers can loan a card for the
duration of the meeting and/or buy a card. They would like to get some
idea of how many people attending the meeting would like to take up
this offer so they can ensure they have sufficent stocks to meet the
demand.

The package being offered is a WaveLAN IEEE Turbo 11Mbps PC card for
AU$276.36 (approx US$175). Drivers are available from Lucent for (at
least) Windows 95, 98, NT, CE, 2000, MacOS and Linux.

Could people that are interested please send expressions of interest
to [EMAIL PROTECTED] so I can let Lucent know how many cards are
needed.

Thanks,
Mark.