Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Questions about the latest release

From: Gerald Combs <gerald@xxxxxxxxxxxxx>
Date: Wed, 07 Feb 2007 16:53:49 -0800
Thomas Nyheim wrote:
> Firstly, how does the WPA decryption work?

If all of the following conditions are true:

  - You're using pre-shared keys
  - All 4 RSNA handshake packets are present for the session you're
    trying to decrypt
  - You've specified the proper password, password+SSID, or raw PSK

then Wireshark can determine the derived key for a WPA session and
decrypt its traffic.