06. WPA WPA2 PSK Traffic Decryption

• Every client (and AP) has the same PMK on a given network (computed from Passphrase PSK).
• However, the PTK key generated from PMK is unique and generated during the WPA authentication (different for each client).
• And PTK is used to encrypt data between client & AP.

Therefore, in order to decrypt data on WPA/WPA2 network, an attacker needs:

• Passphrase PSK => Will allow to generate PMK.
• 4-Way Handshake => Will allow (along with PMK) to generate PTK for the targeted used.