German security researcher taps cloud to crack WPA-PSK WiFi passwords in six minutes

According to German newswire reports, Thomas Roth's software can reportedly process as many as 400 000 passwords a second using Amazon's cloud resources.

Infosecurity notes that the revelation means – in theory at least – that most, if not all, WiFi sessions must now be considered insecure.

Reporting on this latest WiFi password cracking discovery, Tech Radar said over the weekend that officials at Amazon could not immediately be reached for comment on Roth's revelations.

The gameplan now, says Tech Radar writer Adam Hartley, is for Roth to publish his findings at 2011's first Black Hat security conference, which takes place later this month in Washington, D.C.

Roth is quoted as saying he is publicising his research as a means of convincing sceptical network administrators that a commonly used method for securing WiFi data is no long strong enough to keep intruders out of the network.

Infosecurity understands that, at a cost of less than 20 pence per minute, Amazon's cloud resource can compute its way through 24 million password combinations a minute.

At these speeds, Roth claims he originally cracked a WPA-PSK password in around 20 minutes, a process he has since refined down to just six minutes.

What’s hot on Infosecurity Magazine?