{"action":"created","issue":{"url":"https://api.github.com/repos/jbenden/aircrack-ng-migration/issues/318","repository_url":"https://api.github.com/repos/jbenden/aircrack-ng-migration","labels_url":"https://api.github.com/repos/jbenden/aircrack-ng-migration/issues/318/labels{/name}","comments_url":"https://api.github.com/repos/jbenden/aircrack-ng-migration/issues/318/comments","events_url":"https://api.github.com/repos/jbenden/aircrack-ng-migration/issues/318/events","html_url":"https://github.com/jbenden/aircrack-ng-migration/issues/318","id":296260850,"number":318,"title":"PTW does not seems to work well in 40 bit keys","user":{"login":"jbenden","id":73767,"avatar_url":"https://avatars3.githubusercontent.com/u/73767?v=4","gravatar_id":"","url":"https://api.github.com/users/jbenden","html_url":"https://github.com/jbenden","followers_url":"https://api.github.com/users/jbenden/followers","following_url":"https://api.github.com/users/jbenden/following{/other_user}","gists_url":"https://api.github.com/users/jbenden/gists{/gist_id}","starred_url":"https://api.github.com/users/jbenden/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jbenden/subscriptions","organizations_url":"https://api.github.com/users/jbenden/orgs","repos_url":"https://api.github.com/users/jbenden/repos","events_url":"https://api.github.com/users/jbenden/events{/privacy}","received_events_url":"https://api.github.com/users/jbenden/received_events","type":"User","site_admin":false},"labels":[{"id":834534218,"url":"https://api.github.com/repos/jbenden/aircrack-ng-migration/labels/%23aircrack-ng","name":"#aircrack-ng","color":"0000aa","default":false},{"id":834534382,"url":"https://api.github.com/repos/jbenden/aircrack-ng-migration/labels/@major","name":"@major","color":"f6f6f6","default":false},{"id":834531986,"url":"https://api.github.com/repos/jbenden/aircrack-ng-migration/labels/bug","name":"bug","color":"d73a4a","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/jbenden/aircrack-ng-migration/milestones/6","html_url":"https://github.com/jbenden/aircrack-ng-migration/milestone/6","labels_url":"https://api.github.com/repos/jbenden/aircrack-ng-migration/milestones/6/labels","id":3106401,"number":6,"title":"0.9.2","description":"Fixes for 0.9","creator":{"login":"jbenden","id":73767,"avatar_url":"https://avatars3.githubusercontent.com/u/73767?v=4","gravatar_id":"","url":"https://api.github.com/users/jbenden","html_url":"https://github.com/jbenden","followers_url":"https://api.github.com/users/jbenden/followers","following_url":"https://api.github.com/users/jbenden/following{/other_user}","gists_url":"https://api.github.com/users/jbenden/gists{/gist_id}","starred_url":"https://api.github.com/users/jbenden/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jbenden/subscriptions","organizations_url":"https://api.github.com/users/jbenden/orgs","repos_url":"https://api.github.com/users/jbenden/repos","events_url":"https://api.github.com/users/jbenden/events{/privacy}","received_events_url":"https://api.github.com/users/jbenden/received_events","type":"User","site_admin":false},"open_issues":1,"closed_issues":24,"state":"closed","created_at":"2018-02-12T00:10:38Z","updated_at":"2018-02-12T03:56:49Z","due_on":null,"closed_at":"2018-02-12T00:10:38Z"},"comments":12,"created_at":"2018-02-12T03:56:49Z","updated_at":"2018-02-12T03:57:07Z","closed_at":null,"author_association":"OWNER","body":"**Reported by Krampo on 31 Aug 2007 22:19 UTC**\n\nI've done some tests with 40 bit keys and usually the PTW attack does not find them.\n\nWhat is more surprising to me is that the first bytes shown in the screen where aircrack-ng is trying to find the 104 bit key are the correct bytes for the 40 bit key.\n\nBUT when the screen changes for try to find the 40 bit key, the bytes shown are completely different .... and wrong.\n\nMigrated-From: https://trac.aircrack-ng.org/ticket/318"},"comment":{"url":"https://api.github.com/repos/jbenden/aircrack-ng-migration/issues/comments/364823616","html_url":"https://github.com/jbenden/aircrack-ng-migration/issues/318#issuecomment-364823616","issue_url":"https://api.github.com/repos/jbenden/aircrack-ng-migration/issues/318","id":364823616,"user":{"login":"jbenden","id":73767,"avatar_url":"https://avatars3.githubusercontent.com/u/73767?v=4","gravatar_id":"","url":"https://api.github.com/users/jbenden","html_url":"https://github.com/jbenden","followers_url":"https://api.github.com/users/jbenden/followers","following_url":"https://api.github.com/users/jbenden/following{/other_user}","gists_url":"https://api.github.com/users/jbenden/gists{/gist_id}","starred_url":"https://api.github.com/users/jbenden/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jbenden/subscriptions","organizations_url":"https://api.github.com/users/jbenden/orgs","repos_url":"https://api.github.com/users/jbenden/repos","events_url":"https://api.github.com/users/jbenden/events{/privacy}","received_events_url":"https://api.github.com/users/jbenden/received_events","type":"User","site_admin":false},"created_at":"2018-02-12T03:57:07Z","updated_at":"2018-02-12T03:57:07Z","author_association":"OWNER","body":"**Comment by Krampo on 31 Aug 2007 22:19 UTC**\n\nI found the root cause of this bug:\n\nThe chopchop attack packets which length is 68 or 86 are treated like ARP packets and so they give false negatives when are used for verify the key. It is very probable to use these packets as control packets because they are at the begin of the file (if you are working with a packet capture file that contains the initial chopchop attack).\n\nI patched the PTW_addsession function so that it refuses to use non broadcast packets for the control session packet array ... and the problem dissapeared. My patch isn't clean because I added a dstmac parameter to PTW_addsession for this test.\n\nPerhaps this filtering should be done in read_thread, before calling PTW_addsession; or perhaps the is_arp function should be fixed as its comment already points. So in v1.0 we could to stay with few control sessions (the current approach of 1.0-dev only reduces the likelihood of the problem but doesn't solves the root cause)."}}
{"actor":{"display_login":"jbenden"}}