I have been trying to capture and decrypt from a WPA2-PSK wireless network, but the preshared key has a "£" (UK pound sign). It seams that wireshark (1.12.1 Win7 with AirPCAP) is corrupting the Preshared key. If I enter the PSK in the "Decryption key management" dialog, exit the dialog and reopen it the key is corrupted. Has anyone else come across this? asked 06 Nov '14, 09:31  C_P |
One Answer:
After some research I have been able to resolve my issue. From the "How to Decrypt 802.11" wiki page? "The WPA passphrase and SSID preferences let you encode non-printable or otherwise troublesome characters using URI-style percent escapes, e.g. %20 for a space. As a result you have to escape the percent characters themselves using %25." By replacing the "£" with "%a3" I am able to decrypt the capture. Interestingly the last two characters of the corrupted part of the PSK was "a3". answered 06 Nov '14, 12:18 C_P |
