WEP Keys are keys created based on a password or phrase that the Wireless LAN
administrator decides.
eg. If I typed in
FLUBBERISGREEN
and clicked Generate WEP Key based on the above phrase, I would get
(depending on the level of encryption I selected) a long encrypted number
like:
10a3bd389261e6a1b
This is what is known as the "Key"
When you go to your Windows machine and attempt to connect to the Secure
Wireless Network, you will need to specify this key (you will also need to
set the network as "WEP Enabled" and "Shared Key" which means you will be
prompted for the Key once and then supposedly never again.
The pitfalls of WEP:
"WEP is vulnerable because of relatively short IVs and keys that remain
static. The issues with WEP don't really have much to do with the RC4
encryption algorithm. With only 24 bits, WEP eventually uses the same IV for
different data packets. For a large busy network, this reoccurrence of IVs
can happen within an hour or so. This results in the transmission of frames
having keystreams that are too similar. If a hacker collects enough frames
based on the same IV, the individual can determine the shared values among
them, i.e., the keystream or the shared secret key. This of course leads to
the hacker decrypting any of the 802.11 frames.
The static nature of the shared secret keys emphasizes this problem. 802.11
doesn't provide any functions that support the exchange of keys among
stations. As a result, system administrators and users generally use the same
keys for weeks, months, and even years. This gives mischievous culprits
plenty of time to monitor and hack into WEP-enabled networks"
more Info:
http://www.wi-fiplanet.com/tutorials/article.php/1368661
WPA vs WEP:
http://www.openxtra.co.uk/articles/wpa-vs-wep.htm
WPA is slightly different in the way that it works, but it is the more
secure of the two. WPA2 is the new kid on the block for Wireless Security:
http://www.wi-fi.org/OpenSection/protected_access.asp
http://www.wi-fi.org/OpenSection/pdf/WPA2_Q_A.pdf
For lots of great info on Wireless Security go here:
http://www.wi-fi.org/OpenSection/secure.asp?TID=2
Be aware that you can also configure Wireless Security and settings via
Group Policy if you are using XP as a client.
In laymans terms WPA uses a changing key so is harder to "crack" wheras WEP
has a key that needs to be changed by the Net Admin, which is often the same
for a long time.
