Router Keygen?

[michael_kent123]

Does anyone know what Router Keygen actually does: http://router-keygen.en.uptodown.com/

Apparently, "Router Keygen for Windows interface is very simple. In the main window you'll have three tabs separating all the WiFi networks that can be found in your vicinity: on one side the ones supported by Router Keygen, on another the ones probably not supported, and finally the ones that you're sure not to be able to decrypt."

I don't understand what this means. The program is a nightmare to setup in Ubuntu so I don't want to spend anymore time on it unless it's actually interesting.

Perhaps someone can spell out to me what this program does.

[digininja]

As it says underneath all that

"Router Keygen generates generic WPA/WEP keys for the following router models:"

Some devices have predictable encryption keys when running in the default config, often based on MAC address or ESSID. This app knows the algorithms used and tries to generate the keys based on those.

[michael_kent123]

Yes, I've noticed that often a MAC address will have some similarities to the BSSID.

I didn't realise that it might be possible to compute the WPA password from the MAC or BSSID.

[digininja]

As the WPA key can be anything you want between 8 and 63 characters so some manufacturers, rather than going with a fixed key on all devices, derive the key from something on the device, often the MAC address.

The derivation algorithm can be as simple as

key = MAC

or more complex

key = SHA1(MD5(CRYPT(MAC)))

But once the algorithm is public then tools like this can perform the same calculations and show the possible key.

[digininja]

And I assume you mean ESSID, the BSSID is the MAC address in most infrastructure situations.

[dustbyter]

I've seen many of these types of tools for routers in Europe. Where they can derive a key based on the router model or information broadcast by the router.

[michael_kent123]

I downloaded Router Keygen onto my Android tablet.

However, all networks were considered "unsupported". I am surrounded by BTHomeHubs, SKY, and TalkTalk. These may well be Broadcom which are not supported by Router Keygen which targets Thomspon routers.

I've seen many of these types of tools for routers in Europe. Where they can derive a key based on the router model or information broadcast by the router.

What do you mean by "Europe"? For example, I am in the UK which is Europe. Do you mean continental Europe e.g. France, Spain, Italy, etc?

[digininja]

It has nothing to do with location, any supplier of this type of device can chose how they derive their keys, it may be more common in Europe but I couldn't comment on that.

I'd also suspect it is the software supplier who determins how it is generated rather than the hardware people or the end distributor so that would appear to randomise the playing field as well as two boxes supplied by BT may both be from the same hardware manufacturer but be running firmware from different suppliers.