D
D
DVoropaev2017-10-24 11:17:28
WiFi
DVoropaev, 2017-10-24 11:17:28

How to translate this sentence from English, or how is a fake package different from an injection?

Here is the original text:


Simplified, against AES-CCMP an adversary can replay and decrypt (but not forge) packets. This makes it possible to hijack TCP streams and inject malicious data into them.

This is how I translated:

Simply put, an attack against AES-CCMP allows packets to be replayed and decrypted (but not forged). This allows you to hijack TCP streams and inject malicious data into them.

Why is it possible to make an injection, but not to fake it?

Answer the question

In order to leave comments, you need to log in

1 answer(s)
J
jcmvbkbc, 2017-10-24
@DVoropaev

Why is it possible to make an injection, but not to fake it?

Because being in the middle, you can inject previously intercepted packets (replay) into the connection. But in order to fake a package, you need to know the key.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question