Wireshark-users: Re: [Wireshark-users] Questions about the latest release
From: Gerald Combs <[email protected]>
Date: Wed, 07 Feb 2007 16:53:49 -0800
Thomas Nyheim wrote:
> Firstly, how does the WPA decryption work?

If all of the following conditions are true:

  - You're using pre-shared keys
  - All 4 RSNA handshake packets are present for the session you're
    trying to decrypt
  - You've specified the proper password, password+SSID, or raw PSK

then Wireshark can determine the derived key for a WPA session and
decrypt its traffic.