Question

How to convert passphrase into a 'WPA Shared Key' for a Linksys WAP54G v1.1 Access Point?

Asked by: anushahanna

The choice available are

'WPA-Personal' - TKP or
'WPA2-Personal'- AES
which takes in a passphrase, but it needs to be converted into a 'WPA Shared Key' to supply for the client wireless devices.

If I just feed the passphrase as it is, it does not like it. It somehow needs to be converted.

(Also the passphrase has a 'Key Renewal'. Would you know what is the significance of it?)

Thanks

WPA Shared Key,passphrase, security, Linksys Access Point

                                  
1:

Select allOpen in new window

This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Asked On
2009-06-23 at 08:24:49ID24514965
Tags

Linksys Access point- security

Topics

Wireless Network Access Points

,

Network Routers

,

Wireless Networking

Participating Experts
3
Points
500
Comments
20

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. WEP 64/128 or WPA
    I am deciding between WEP 64 bit 128 bit and WPA What are your feelings? How long would it take to brute force crack a WEP 64 bit password? thanks. david
  2. HAVING TROUBLE SETING UP WPA SECURITY IN LINKSYS …
    I have a linksys router set up with securuity WPA PRE SHARED KEY, Wpa Alg.:TKIP,Wpa shared key: *****, Group key renewal :3600. , i used easy link to hook up to a hp network wireless printer all works fine, trying to take a desktop off of wired and make wireless using WMP54G ...
  3. WPA or WPA2 or Both?
    I see the following on my router's setup page, and I don't know if I should enable WPA, WPA2 or both? Will this slow my wireless network down due to having to encrypt decrypt the data it sends? http://www.davidgareau.com/expertExchange/WPA%20&%20WPA2.JPG
  4. WPA:  TKIP or AES CCMP on a linksys Wap
    Hi Experts I've just changed a couple of the network WAP's (Linksys WAP54G) to run WPA2 Personal (from WEP) but has only give the encryption as AES CCMP, i'm wondering is this propriety stuff for Linksys. I was planning on using TKIP (presume this isn't available with WPA2 ...

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: asavenerPosted on 2009-06-23 at 08:52:42ID: 24693077

  WPA key calculation:   From passphrase to hexadecimal key

http://www.xs4all.nl/~rjoris/wpapsk.html

 

by: asavenerPosted on 2009-06-23 at 08:53:46ID: 24693089

Details of the calculation  
For WPA-PSK encryption, the binary key is derived from the passphrase according to the following formula:     Key = PBKDF2(passphrase, ssid, 4096, 256)
 
The function PBKDF2 is a standardized method to derive a key from a passphrase. It is specified in RFC2898 with a clear explanation on how to compute it. The function needs an underlying pseudorandom function. In the case of WPA, the underlying function is HMAC-SHA1.
 SHA1 is a function that computes a 160-bit hash from an arbitrary amount of input data. It is clearly explained in RFC3174. HMAC is a standardized method to turn a cryptographic hash function into a keyed message authentication function. It is specified in RFC2104.  
 To summarize, the key derivation process involves iterating a HMAC-SHA1 function 4096 times, and then doing that again to produce more key bits. The amount of computation involved is equivalent to computing the SHA1 hash over 1 MByte of data. Perhaps that explains why the Javascript on this page is so slow.

 

by: asavenerPosted on 2009-06-23 at 08:54:03ID: 24693091

(Quoted from the page referenced above.)

 

by: Darr247Posted on 2009-06-24 at 03:30:40ID: 24699731

Unless you're using the setup wizard or something, you should be able to enter the desired key directly, without having to convert it. The only part of the security menu with a passphrase converter is if WEP is chosen.

Where is this passphrase coming from?
i.e. what else has already been setup using that passphrase in a converter/generator?

Also, what version of firmware is loaded?  It should tell in the upper right corner of the http menus.
Firmware v3.04 is the newest available for WAP54G v1.1 according to
http://www.linksysbycisco.com/US/en/support/WAP54G/download

 

by: anushahannaPosted on 2009-06-27 at 16:21:49ID: 24729600

I chose the WPA2-Personal option. I put the passphrase in the router and I thought I will put the same in the printserver without conversion. But I was not able to login into the printserver box(because apparently it does not have the password/passphrase as the router. So I went back into the router, and disabled wireless security in the router. Now I was able to go into the printserver.

So I thought I will put the WPA2-Personal passphrase/password there, and then go to the router, and put the same there also. The printserver took my option ok. Then I went to the router, and put the same password/passphrase.  But the printer was not responding now. So I wanted to go back and disable the wireless security to think about the next phase of action, but now it will not allow me to go into printserver box. I was able to go into the router, and disable the security there. But alas, the printserver will not allow me in.

I guess my next action step is to somehow disable the wireless security. But how? And after that, my next action step will be make the router and printserver talk back and forth with a common password.

Darr247,
I guess i cannot put the passphrase as it is, even if it non WEP,  because it seems to fail. I chose WPA2-Personal option for this reason. Or am I missing anything else, here?

Any thoughts?

 

by: anushahannaPosted on 2009-06-27 at 16:22:59ID: 24729605

Darr247,
Yes, I have the v3.04 on the router.

Thanks for checking that for me.

 

by: anushahannaPosted on 2009-06-27 at 16:42:01ID: 24729637

I cannot use the WEP option, anyways, because of the following:

The option on the printserver are 64 bit keys, 128 bit keys, WPA Personal,  WPA2 Personal.

The options on the router are WEP, WPA Personal,  WPA2 Personal,WPA2 Mixed, WPA Entrprise & Radius & of course 'disabled'.

so seems like i have to choose between WPA Personal or  WPA2 Personal.

 

by: Darr247Posted on 2009-06-27 at 17:28:05ID: 24729720

You may be confusing the setup login password with the wireless security password. They are not the same thing, though you may have actually entered the same password for all of them.

64-bit and 128-bit are WEP keys, but WPA2-personal is the preferred method if all your hardware supports it; WEP is not secure.

What is the brand and model of printserver?

 

by: anushahannaPosted on 2009-06-27 at 18:25:43ID: 24729838

Darr247,
The printserver is Linksys Wireless-G PrintServer WPS54G.

I believe I have set the password for the login into the box seperate from the password for the security encryption. The password to get into the box works ok.

so, seems like I tried the best option (WPA2-personal).
I did put the passphrase as it is in the router also in the printserver. But it has not worked.

So perhaps, I need to convert the passphrase from the router to bring the WPA2-personal key to enter into the printserver.

But before that, I need to refresh the encryption password of the printserver, so I can go back in, into the box, and work on it.

Now, to clarrify, right now, the printserver box is not accessible through the network (because of the encryption password issue). If it becomes accessible, then I can use it's regular login credentials to log into the box and work on the encryption password issue.

Thanks.

 

by: Darr247Posted on 2009-06-27 at 19:16:40ID: 24729910

According to WPS54G's data sheet, it does not support WPA2, only WPA.
So try setting the router to WPA-Personal and use TKIP encryption rather than AES.

It's possible to capture TKIP'd packets and crack their encryption offline, ergo it's possible (with much work) to expose the data (I have not yet seen any claims of successfully cracking AES encryption), but the crackers cannot follow the vectors back to expose the original password, so your connection would still be secure... and every time the password changes (according to the renewal time) they would have to capture more packets and crack the encryption again.

IE8 cannot attach files on EE since the MS updates about 3 weeks ago, so here's a link to where the data sheet can currently be found:
http://www.linksysbycisco.com/US/en/products/WPS54G

 

by: anushahannaPosted on 2009-06-27 at 20:10:26ID: 24730001

Darr247,
So I will avoid WPA2-personal and just try the WPA-personal.

For example, if I keep the passphrase for the TKIP approach as "year2009" in the router; do i input this as the password in the printserver, or do i have to convert this?

but besides this, any ideas to clear out the encryption (AES) password already set for the printserver? that is not allowing me to touch the box settings.

 

by: Darr247Posted on 2009-06-27 at 21:20:42ID: 24730108

You should be able to connect the print server to the router temporarily with a short network cable and access its setup menus like that. Connecting the print server directly to a computer's NIC may require a crossover cable.

Use the IP address that you assigned with the Setup Wizard. If you don't remember that IP, usually it will be on the diagnostic page that prints when you press the Reset button. Otherwise run the setup wizard using the setup CD. Follow the prompts until you reach the Wireless-G PrintServer Setup screen. Note the IP address, then back out until you're at the Welcome screen and click Exit.

If there's no way to connect it to a LAN port on a switch/the router, and you don't have a crossover cable, reset it to defaults by unplugging it, hold in the reset button, then plug the power back in on the printserver. Continue holding in the reset button at least 10 seconds (usually the LEDs on the front will flash when it resets)... without the power being dropped first, pressing the reset button will just print a diagnostics page as noted above.

 

by: Darr247Posted on 2009-06-27 at 21:22:48ID: 24730111

Oh, and no 'conversion' should be necessary. Just enter the same passphrase in everything with the same security and encryption type selected.

 

by: anushahannaPosted on 2009-06-27 at 22:15:05ID: 24730182

Darr247,
I know the IP address of the Print Server. I also have the diagnostics page printed when I reset the printserver box, in hopes that it will clear the encryption password. That page also has the same IP address.

I can connect the printserver to the router through a long ethernet cable. After I connect that way, should I put the IP address of the printserver on the IE Browser, to disable the existing encryption password?

If I understand right, the router cannot speak to the printserver right now, because of the mismatch of passwords and my inability to get into the printserver box settings. If I connect the printserver to the router through a wire, then they may be able to talk to each other, and that way, I may have a chance to disable the encryption password of the printserver, and assign the new TKIP Password. If I am wrong in my understanding, kindly corect me.

I wish I had tried TKIP first instead of AES.. but glad I have this help to get back into, to reset the encryption password, and set a valid password..

Thanks much.

 

by: Darr247Posted on 2009-06-27 at 23:17:12ID: 24730271

It sounds like you understand it fine. The wireless security/encryption passphrase controls only the wireless connection, not access to the setup menu per se... so if the printserver is connected with a network cable the wireless security passphrase doesn't matter.

Personally, our printserver here is connected to the LAN with a cable even though it's possible to connect it wirelessly... I find it does print a little faster on most jobs like that (i.e. except from laptops connected to the LAN wirelessly).  But if you don't want to run cable to it permanently, there's nothing inherently 'wrong' with connecting it wirelessly.

 

by: anushahannaPosted on 2009-06-27 at 23:27:01ID: 24730287

Darr247
Thanks much, Will test it and let know the 'sucess' story, hopefully.

 

by: anushahannaPosted on 2009-06-30 at 05:45:21ID: 24744645

Phew.. finally, I managed to get the printer on ok, wirelessly, late yesterday. It took countless times of trying/reseting/restarting, rebooting the network etc.

I did not want to touch on the encryption password, fearing if it breaks, it will be too late to try to fix it.

Can you please give me the order in which to try to put the password, to play it the safest.
Would it as simple to put a password in the AP, then go and put the Same PW in the printserver.

Now, I saw something different yesterday. Even though the console for the printserver said it allows WPA and WPA2, the software wizard suggests that only WEP (64 or 128 bit) is allowed.

But you said WEP was the weakest of all of them, not?

I saw that WEP gives 10 digit password(s) for 64 bit, and 26 characters for 128 bit.
Thanks,

 

by: anushahannaPosted on 2009-07-26 at 12:03:00ID: 24946957

Darr247
If I can use only WEP, would you recomend going with the 128 bit over the 64?
Thanks

 

by: Darr247Posted on 2009-07-26 at 13:26:58ID: 24947270

The time difference to crack one over the other is fairly insignificant (like, 8 minutes versus 5 minutes).
Using a 64-bit key would add less overhead (the encrypted key is sent with every packet, which is the main thing that makes it so insecure), so you might consider that if you're forced to use WEP rather than just leaving it open.

One analogy of wireless security is the entryway to a home... leaving it 'open' is like closing the storm door but leaving the inside door completley open; turning off the SSID is like painting the storm door the same color as the house... if you look closely you can still see where the door is. Adding a MAC filter is like adding a lock to the storm door, except anyone with knowledge of those doors is aware nearly all of them use the same key - CH751 or 751CH (which is also the same key 95% of truck caps use), and MAC addresses are easily spoofed. Using WEP is like closing the inside door too, but it's still unlocked (64-bit = wood door; 128=bit = steel door, but they're unlocked either way, so composition doesn't matter much). Using WPA/TKIP is like locking the inside door, but the door is made from glass (with WPA/TKIP the packets can be captured and cracked offline, so your data's still not ''secure,'' but the cracker cannot trace the vectors backwards to decrypt the original password and gain access to the internet), so 'privacy' is not exactly assured. WPA2/AES is a locked steel door with no windows (wireless intrusion detection would be the peephole equivalent).

So in essence, using WEP (and/or MAC filters) keeps out only honest people.

 

by: ComputerJoePosted on 2009-11-12 at 00:34:16ID: 25802422

Some unmanaged WiFi routers get confused if you have BOTH an ethernet cable and a WiFi connection to the same device (printer, laptop, etc.).  Choose one or the other.

Stay away from WEP.

Pass phrases are space, character and case sensitive.  Be exact on all devices.

Be consistent.  If using TKIP on one device, use TKIP on all.  Do not mix AES with TKIP.

Have a great day.
- Joe

20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...