Comment by 0xcde4c3db

If I'm reading things right, this sounds like a vulnerability in WPA itself kept open for backward compatibility. It's fixed by implementing the "4-way handshake", which a comment in the patch says is not in the standard. I'm pretty sure it is in 802.11i (published by IEEE), so maybe it's not in WPA (published by Wi-Fi Alliance)?. I don't know where to find the actual WPA version of the spec to check; maybe it was never public.