Int 8: WPA2 Handshake Analysis - 4-Way Handshake WiFi

cd ~ && mkdir crypto-int8 && cd crypto-int8

# 1. WPA2 4-Way Handshake
echo "=== WPA2 4-Way Handshake ==*"
echo ""
echo "AP (Access Point)              Client"
echo "  |                                |"
echo "  |<-- Assoc Request ------------   |"
echo "  |--- Assoc Response ----------->  |"
echo "  |                                |"
echo "  |--- [1] ANonce (AP nonce) ---->  |"
echo "  |<-- [2] SNonce + MIC --------   |  ← Client tahu password"
echo "  |--- [3] GTK + MIC ------------>  |  ← AP verifikasi MIC"
echo "  |<-- [4] ACK -----------------   |"
echo "  |                                |"
echo "  |===== EAPOL over 802.1X =======|"
echo "  |      (encrypted traffic)       |"
echo ""

# 2. Komponen keamanan
python3 << 'PYEOF'
print("=== Komponen Keamanan WPA2 ==*")
print()
print("PMK (Pairwise Master Key)")
print("  └── Dari: PSK (Password) + SSID")
print("  └── PSK = PBKDF2(HMAC-SHA1, Password, SSID, 4096, 256)")
print()
print("PTK (Pairwise Transient Key)")
print("  └── Dari: PMK + ANonce + SNonce + MAC addresses")
print("  └── Terdiri dari: KCK, KEK, TK (AES keys)")
print()
print("MIC (Message Integrity Code)")
print("  └── HMAC-SHA1 dengan KCK")
print("  └── Jika password salah → MIC invalid → handshake gagal")
print()

# 3. Keamanan WPA2
print("=== WPA2 Security ==*")
print("AES-CCMP (Counter Mode with CBC-MAC)")
print("  - Enkripsi: AES-CTR (confidentiality)")
print("  - MAC:      AES-CBC-MAC (integrity)")
print()
print("Serangan umum:")
print("  - Bruteforce handshake capture (offline)")
print("  - KRACK (Key Reinstallation Attack - CVE-2017)")
print("  - PMKID attack (tanpa client)")
print("  - WPS PIN brute force")
print()
print("Solusi: WPA3 / WPA2 + strong password + disable WPS")
PYEOF