The Patching Friars' AlmanacA calendar of CVE saints

Feast day October 16

KRACKHoly card for krack, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 KRACK CLAVIS ITERATA
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint KRACK, Who Made the Key Be Reinstalled

Patron of protected Wi-Fi networks, handshakes repeated one time too many, and everyone who thought WPA2 unbreakable.

Life

Mathy Vanhoef presented KRACK in October 2017: the "key reinstallation attack" struck the four-way handshake of WPA and WPA2, forcing a device to reinstall a key already in use and resetting the counters meant to keep packets unique. From there an attacker within range could decrypt, replay and in some cases alter traffic. It was a flaw in the standard itself, and so in almost every Wi-Fi device in the world.

Prayer

O Saint KRACK, who makes the used key be reinstalled, let our counters never start over from the beginning. Amen.

How to celebrate

Celebrated by updating clients and access points and trusting HTTPS more than the Wi-Fi padlock.

Key reinstalled, secrecy dissolved.

Technical record

Disclosed on
October 16 2017
CVE
CVE-2017-13077
Product
Wi-Fi Alliance · Wi-Fi Protected Access (WPA and WPA2)

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.

Sources: krackattacks.com

📅 Add to your calendar

Saints:Google CalendarApple, Outlook and others (.ics)

Observances (feasts, scourges and miracles):Google CalendarApple, Outlook and others (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.