USENIX Security '23 - Framing Frames: Bypassing Wi-Fi Encryption by Manipulating Transmit Queues

USENIX Security '23 - Framing Frames: Bypassing Wi-Fi Encryption by Manipulating Transmit Queues

Domien Schepers and Aanjhan Ranganathan, Northeastern University; Mathy Vanhoef, imec-DistriNet, KU Leuven

Wi-Fi devices routinely queue frames at various layers of the network stack before transmitting, for instance, when the receiver is in sleep mode. In this work, we investigate how Wi-Fi access points manage the security context of queued frames. By exploiting power-save features, we show how to trick access points into leaking frames in plaintext, …

bypassing devices encryption framing frames imec instance network northeastern university queues security sleep stack university usenix usenix security wi-fi