thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Wireless & Mobility · Advanced

Key Reinstallation Attack (KRACK)

2017 attack that tricks clients into reinstalling an in-use key, resetting nonces and enabling decryption.

Definition

KRACK exploited retransmission of message 3 of the 4-way handshake to force nonce reuse in vulnerable implementations. It affected WPA2 implementations, especially Linux and Android wpa_supplicant. Patches to clients and APs fixed it.

Exam tip

KRACK was an implementation-level protocol flaw fixed by patching, not by changing passwords.

Related terms