biases in the rc4 keystream (128 bit uniform vs. wpa/tkip)isg.rhul.ac.uk/tls/tkip_biases.pdf ·...

257
Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP) Nadhem AlFardan and Dan Bernstein and Kenny Paterson and Bertram Poettering and Jacob Schuldt Royal Holloway, University of London University of Illinois at Chicago http://www.isg.rhul.ac.uk/tls/

Upload: others

Post on 24-Sep-2020

6 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Biases in the RC4 keystream(128 bit uniform vs. WPA/TKIP)

Nadhem AlFardan and Dan Bernstein and Kenny Paterson andBertram Poettering and Jacob Schuldt

Royal Holloway, University of LondonUniversity of Illinois at Chicago

http://www.isg.rhul.ac.uk/tls/

Page 2: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 1

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Page 3: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 2

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 2 / 256

Page 4: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 3

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 3 / 256

Page 5: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 4

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 4 / 256

Page 6: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 5

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 5 / 256

Page 7: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 6

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 6 / 256

Page 8: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 7

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 7 / 256

Page 9: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 8

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 8 / 256

Page 10: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 9

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 9 / 256

Page 11: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 10

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 10 / 256

Page 12: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 11

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 11 / 256

Page 13: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 12

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 12 / 256

Page 14: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 13

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 13 / 256

Page 15: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 14

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 14 / 256

Page 16: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 15

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 15 / 256

Page 17: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 16

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 16 / 256

Page 18: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 17

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 17 / 256

Page 19: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 18

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 18 / 256

Page 20: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 19

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 19 / 256

Page 21: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 20

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 20 / 256

Page 22: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 21

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 21 / 256

Page 23: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 22

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 22 / 256

Page 24: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 23

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 23 / 256

Page 25: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 24

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 24 / 256

Page 26: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 25

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 25 / 256

Page 27: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 26

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 26 / 256

Page 28: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 27

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 27 / 256

Page 29: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 28

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 28 / 256

Page 30: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 29

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 29 / 256

Page 31: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 30

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 30 / 256

Page 32: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 31

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 31 / 256

Page 33: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 32

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 32 / 256

Page 34: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 33

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 33 / 256

Page 35: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 34

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 34 / 256

Page 36: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 35

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 35 / 256

Page 37: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 36

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 36 / 256

Page 38: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 37

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 37 / 256

Page 39: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 38

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 38 / 256

Page 40: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 39

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 39 / 256

Page 41: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 40

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 40 / 256

Page 42: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 41

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 41 / 256

Page 43: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 42

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 42 / 256

Page 44: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 43

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 43 / 256

Page 45: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 44

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 44 / 256

Page 46: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 45

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 45 / 256

Page 47: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 46

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 46 / 256

Page 48: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 47

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 47 / 256

Page 49: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 48

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 48 / 256

Page 50: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 49

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 49 / 256

Page 51: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 50

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 50 / 256

Page 52: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 51

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 51 / 256

Page 53: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 52

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 52 / 256

Page 54: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 53

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 53 / 256

Page 55: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 54

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 54 / 256

Page 56: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 55

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 55 / 256

Page 57: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 56

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 56 / 256

Page 58: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 57

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 57 / 256

Page 59: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 58

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 58 / 256

Page 60: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 59

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 59 / 256

Page 61: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 60

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 60 / 256

Page 62: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 61

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 61 / 256

Page 63: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 62

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 62 / 256

Page 64: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 63

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 63 / 256

Page 65: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 64

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 64 / 256

Page 66: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 65

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 65 / 256

Page 67: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 66

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 66 / 256

Page 68: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 67

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 67 / 256

Page 69: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 68

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 68 / 256

Page 70: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 69

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 69 / 256

Page 71: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 70

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 70 / 256

Page 72: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 71

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 71 / 256

Page 73: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 72

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 72 / 256

Page 74: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 73

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 73 / 256

Page 75: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 74

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 74 / 256

Page 76: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 75

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 75 / 256

Page 77: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 76

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 76 / 256

Page 78: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 77

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 77 / 256

Page 79: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 78

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 78 / 256

Page 80: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 79

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 79 / 256

Page 81: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 80

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 80 / 256

Page 82: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 81

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 81 / 256

Page 83: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 82

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 82 / 256

Page 84: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 83

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 83 / 256

Page 85: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 84

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 84 / 256

Page 86: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 85

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 85 / 256

Page 87: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 86

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 86 / 256

Page 88: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 87

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 87 / 256

Page 89: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 88

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 88 / 256

Page 90: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 89

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 89 / 256

Page 91: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 90

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 90 / 256

Page 92: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 91

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 91 / 256

Page 93: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 92

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 92 / 256

Page 94: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 93

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 93 / 256

Page 95: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 94

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 94 / 256

Page 96: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 95

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 95 / 256

Page 97: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 96

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 96 / 256

Page 98: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 97

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 97 / 256

Page 99: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 98

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 98 / 256

Page 100: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 99

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 99 / 256

Page 101: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 100

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 100 / 256

Page 102: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 101

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 101 / 256

Page 103: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 102

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 102 / 256

Page 104: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 103

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 103 / 256

Page 105: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 104

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 104 / 256

Page 106: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 105

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 105 / 256

Page 107: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 106

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 106 / 256

Page 108: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 107

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 107 / 256

Page 109: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 108

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 108 / 256

Page 110: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 109

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 109 / 256

Page 111: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 110

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 110 / 256

Page 112: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 111

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 111 / 256

Page 113: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 112

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 112 / 256

Page 114: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 113

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 113 / 256

Page 115: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 114

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 114 / 256

Page 116: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 115

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 115 / 256

Page 117: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 116

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 116 / 256

Page 118: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 117

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 117 / 256

Page 119: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 118

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 118 / 256

Page 120: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 119

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 119 / 256

Page 121: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 120

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 120 / 256

Page 122: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 121

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 121 / 256

Page 123: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 122

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 122 / 256

Page 124: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 123

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 123 / 256

Page 125: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 124

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 124 / 256

Page 126: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 125

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 125 / 256

Page 127: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 126

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 126 / 256

Page 128: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 127

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 127 / 256

Page 129: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 128

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 128 / 256

Page 130: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 129

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 129 / 256

Page 131: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 130

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 130 / 256

Page 132: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 131

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 131 / 256

Page 133: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 132

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 132 / 256

Page 134: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 133

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 133 / 256

Page 135: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 134

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 134 / 256

Page 136: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 135

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 135 / 256

Page 137: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 136

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 136 / 256

Page 138: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 137

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 137 / 256

Page 139: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 138

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 138 / 256

Page 140: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 139

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 139 / 256

Page 141: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 140

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 140 / 256

Page 142: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 141

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 141 / 256

Page 143: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 142

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 142 / 256

Page 144: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 143

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 143 / 256

Page 145: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 144

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 144 / 256

Page 146: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 145

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 145 / 256

Page 147: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 146

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 146 / 256

Page 148: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 147

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 147 / 256

Page 149: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 148

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 148 / 256

Page 150: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 149

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 149 / 256

Page 151: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 150

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 150 / 256

Page 152: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 151

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 151 / 256

Page 153: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 152

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 152 / 256

Page 154: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 153

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 153 / 256

Page 155: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 154

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 154 / 256

Page 156: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 155

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 155 / 256

Page 157: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 156

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 156 / 256

Page 158: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 157

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 157 / 256

Page 159: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 158

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 158 / 256

Page 160: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 159

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 159 / 256

Page 161: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 160

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 160 / 256

Page 162: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 161

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 161 / 256

Page 163: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 162

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 162 / 256

Page 164: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 163

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 163 / 256

Page 165: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 164

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 164 / 256

Page 166: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 165

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 165 / 256

Page 167: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 166

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 166 / 256

Page 168: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 167

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 167 / 256

Page 169: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 168

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 168 / 256

Page 170: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 169

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 169 / 256

Page 171: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 170

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 170 / 256

Page 172: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 171

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 171 / 256

Page 173: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 172

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 172 / 256

Page 174: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 173

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 173 / 256

Page 175: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 174

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 174 / 256

Page 176: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 175

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 175 / 256

Page 177: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 176

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 176 / 256

Page 178: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 177

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 177 / 256

Page 179: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 178

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 178 / 256

Page 180: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 179

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 179 / 256

Page 181: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 180

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 180 / 256

Page 182: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 181

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 181 / 256

Page 183: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 182

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 182 / 256

Page 184: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 183

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 183 / 256

Page 185: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 184

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 184 / 256

Page 186: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 185

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 185 / 256

Page 187: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 186

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 186 / 256

Page 188: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 187

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 187 / 256

Page 189: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 188

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 188 / 256

Page 190: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 189

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 189 / 256

Page 191: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 190

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 190 / 256

Page 192: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 191

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 191 / 256

Page 193: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 192

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 192 / 256

Page 194: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 193

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 193 / 256

Page 195: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 194

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 194 / 256

Page 196: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 195

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 195 / 256

Page 197: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 196

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 196 / 256

Page 198: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 197

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 197 / 256

Page 199: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 198

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 198 / 256

Page 200: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 199

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 199 / 256

Page 201: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 200

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 200 / 256

Page 202: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 201

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 201 / 256

Page 203: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 202

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 202 / 256

Page 204: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 203

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 203 / 256

Page 205: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 204

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 204 / 256

Page 206: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 205

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 205 / 256

Page 207: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 206

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 206 / 256

Page 208: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 207

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 207 / 256

Page 209: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 208

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 208 / 256

Page 210: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 209

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 209 / 256

Page 211: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 210

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 210 / 256

Page 212: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 211

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 211 / 256

Page 213: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 212

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 212 / 256

Page 214: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 213

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 213 / 256

Page 215: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 214

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 214 / 256

Page 216: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 215

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 215 / 256

Page 217: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 216

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 216 / 256

Page 218: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 217

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 217 / 256

Page 219: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 218

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 218 / 256

Page 220: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 219

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 219 / 256

Page 221: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 220

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 220 / 256

Page 222: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 221

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 221 / 256

Page 223: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 222

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 222 / 256

Page 224: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 223

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 223 / 256

Page 225: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 224

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 224 / 256

Page 226: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 225

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 225 / 256

Page 227: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 226

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 226 / 256

Page 228: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 227

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 227 / 256

Page 229: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 228

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 228 / 256

Page 230: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 229

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 229 / 256

Page 231: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 230

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 230 / 256

Page 232: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 231

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 231 / 256

Page 233: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 232

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 232 / 256

Page 234: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 233

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 233 / 256

Page 235: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 234

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 234 / 256

Page 236: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 235

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 235 / 256

Page 237: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 236

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 236 / 256

Page 238: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 237

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 237 / 256

Page 239: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 238

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 238 / 256

Page 240: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 239

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 239 / 256

Page 241: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 240

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 240 / 256

Page 242: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 241

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 241 / 256

Page 243: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 242

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 242 / 256

Page 244: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 243

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 243 / 256

Page 245: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 244

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 244 / 256

Page 246: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 245

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 245 / 256

Page 247: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 246

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 246 / 256

Page 248: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 247

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 247 / 256

Page 249: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 248

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 248 / 256

Page 250: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 249

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 249 / 256

Page 251: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 250

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 250 / 256

Page 252: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 251

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 251 / 256

Page 253: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 252

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 252 / 256

Page 254: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 253

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 253 / 256

Page 255: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 254

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 254 / 256

Page 256: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 255

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 255 / 256

Page 257: Biases in the RC4 keystream (128 bit uniform vs. WPA/TKIP)isg.rhul.ac.uk/tls/tkip_biases.pdf · Byte value [0...255] AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 1 / 256

Keystream distributions at position 256

0.003878

0.00390625

0.00395

0 16 32 48 64 80 96 112 128 144 160 176 192 208 224 240 255

Pro

babili

ty

Byte value [0...255]

AlFardan et al. (RHUL & UIC) Biases in RC4 and WPA/TKIP 256 / 256