Is it possible to decrypt Simultaneous Authentication of Equals (SAE) using Wireshark? SAE is part of WPA-3 personal authentication.
I have a capture that I can share, but I wanted to know if it is technically possible.
Hi Amato,
funny to see you again in a Wireshark forum after all those years. We used to work together, remember? I am one of the Bochum guys...
To answer your question: You need to retrieve not only the air traffic, but also the key from either hostapd or wpa_supplicant by using the -d -K flags. You'll find it explained in more detail here: https://wiki.wireshark.org/HowToDecry...
Hope this helps (although it may be way too late),
Sascha
Asked: 2019-10-23 15:50:20 +0000
Seen: 931 times
Last updated: May 03 '23
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
Wildshark? Presumably a typo.
Yes, it was a typo. I corrected it. Sorry for the confusion
https://www.wireshark.org/lists/wireshark-dev/201903/msg00067.html
At least some work in the area from the great people working on Wireshark.
Thank you Mr. Bob Jones!