WEBVTT 00:00.500 --> 00:00.950 Hi. 00:01.040 --> 00:01.550 Welcome back. 00:02.120 --> 00:06.320 This lecture I'm going to share with you inside of the WP s methodology. 00:06.410 --> 00:09.530 Now why should I discuss about GW piece. 00:09.620 --> 00:16.280 Actually most of the things are same as in the WP but there's a new concept of using pin for authentication 00:16.760 --> 00:23.000 saying basically the client sent a discipline to the access point which verifies it and then alos declined 00:23.030 --> 00:30.410 to connect a DC pin which contains on the numbers isn't very much difficult to voters under normal group 00:30.410 --> 00:32.750 forcing of WP password. 00:32.810 --> 00:39.020 You will have to consider the fact that there may be numbers alphabets and sometimes symbols and more 00:39.020 --> 00:43.180 than eight characters and this makes the task pavilion time tough. 00:43.190 --> 00:50.480 However we can try thousand of QI per second even more which makes it a bit easier now in WP Yes there 00:50.490 --> 00:59.380 is a delay because we have to wait for the AP response and we may only try a few key per second practically 00:59.390 --> 01:01.370 the best I have seen on the pieces. 01:01.400 --> 01:02.790 One key per second. 01:02.960 --> 01:09.680 A DISEASE AND TEN POSSIBLE edits per visit this year to nine and to make it hundred million. 01:09.680 --> 01:13.280 If we assume one key per second that it'll be years. 01:13.280 --> 01:16.640 So where does these taking us set bands always. 01:16.670 --> 01:22.270 There are flaws in this technology that can be used against it that it does it is it checksum of first 01:22.280 --> 01:23.330 76. 01:23.390 --> 01:25.720 That means 10 million possibilities. 01:25.760 --> 01:28.700 In other words one 10 time compared to the previous one. 01:29.000 --> 01:30.840 So it will take two months. 01:30.900 --> 01:35.210 Steal Away took all the PIN number for verification goes in to helps. 01:35.300 --> 01:39.850 So we can independently verify the first four and the last four digits. 01:39.860 --> 01:44.920 It's easy to gaze four digits correctly two times then two gaze eight characters at once. 01:45.100 --> 01:45.680 Okay. 01:45.770 --> 01:52.130 So basically the first half will take 10 to the power for gays and the second to take 10 to the power 01:52.130 --> 01:52.850 strip. 01:52.880 --> 01:56.900 Now that gazes will be 10 to the power for plus 10 to the power 3. 01:57.080 --> 02:04.700 So we need to live in a thousand gazes and eleven thousand seconds divided by minute divided by hour 02:05.150 --> 02:07.650 so that it'll take three hours approximately. 02:07.670 --> 02:13.250 There's all the combinations and most probably the correct Peniel not be the last combination. 02:13.250 --> 02:16.640 Okay so you can expect to reach their result earlier. 02:17.120 --> 02:21.470 However the assumption is that brute forcing will take place at a key per second. 02:22.160 --> 02:29.050 And my personal best is a key of a second and yours might drop to as low as key of a 10 second thought 02:29.060 --> 02:33.980 it takes time to crack the pin but it's actually easy to do this in the next lecture. 02:33.980 --> 02:37.430 I will show you these practical so see you in the next lecture by.