BlackBerry Forums Support Community

BlackBerry Forums Support Community (http://www.blackberryforums.com/)
-   General 8500 Series Discussion - Gemini (http://www.blackberryforums.com/general-8500-series-discussion-gemini/)
-   -   Does Curve 8530 support WPA2 with AES (or WPA2 with CCMP)? (http://www.blackberryforums.com/general-8500-series-discussion-gemini/240393-does-curve-8530-support-wpa2-aes-wpa2-ccmp.html)

glnz 11-22-2010 12:18 PM

Does Curve 8530 support WPA2 with AES (or WPA2 with CCMP)?
 
I have a Curve 8530 provided by my company. For my BB's connection to my home WiFi router (which connects to Verizon DSL), my BB supports WEP, but does it also support WPA2 with AES (or WPA2 with CCMP)?

Do I need to update its OS to get to "Yes"?

Please provide lots of detail!

The reason I ask is that many articles describe WEP as too easy to hack, and I want to harden my home WiFi network to WPA2 with AES (or WPA2 with CCMP). So, before I set my home WiFi router to WPA2 with AES (or WPA2 with CCMP), I want to know if my Curve 8530 can keep up and stay linked when I'm at home.

See this article (link):
Firesheepís Real Lesson: Take Wi-Fi Security Seriously | ZDNet

which says:
"If you really want to secure a Wi-Fi network in 2010 you must use WPA2 with Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP), aka Advanced Encryption Standard (AES). If you donít, trust me, if someone really wanted your important information out of your business network theyíve already got it and then they didnít a baby cracker tool like Firesheep to do it."
Thanks!

MidnightDraven 11-22-2010 12:41 PM

Re: Does Curve 8530 support WPA2 with AES (or WPA2 with CCMP)?
 
Easier solution:
Enable MAC address filtering on your router to allow access to only those MAC addresses you want.
Enter the BB WLAN MAC address [along with any other device].

This will allow only those MAC addresses to connect.

glnz 11-22-2010 12:43 PM

Re: Does Curve 8530 support WPA2 with AES (or WPA2 with CCMP)?
 
Midnight - Already doing that on my router, but I understand from numerous articles that a determined hacker can cut right through that defense.

Any thoughts whether my Curve 8530 can do WPA2 with AES (or WPA2 with CCMP)?

Thanks.

MidnightDraven 11-22-2010 12:51 PM

Re: Does Curve 8530 support WPA2 with AES (or WPA2 with CCMP)?
 
I don't believe that, but ok.
I'm unaware, try looking at blackberry.com in the specs or user manual.

glnz 11-22-2010 12:53 PM

Re: Does Curve 8530 support WPA2 with AES (or WPA2 with CCMP)?
 
Midnight - The specs aren't clear to me.

The security options in my Blackberry Curve for the existing wireless profile for my home modem-router are the following, and I don't know whether any of them is the same as WPA2 with AES:
WEP
Pre-Shared Key (PSK)
PEAP
LEAP
EAP-TLS
EAP-FAST
EAP-TTLS
EAP-SIM
EAP-AKA

Is any of these the same as WPA2 with AES?

paramedic233 11-22-2010 03:29 PM

Re: Does Curve 8530 support WPA2 with AES (or WPA2 with CCMP)?
 
Quote:

Originally Posted by MidnightDraven (Post 1676634)
I don't believe that, but ok.
I'm unaware, try looking at blackberry.com in the specs or user manual.

How to spoof a MAC address | IT Security | TechRepublic.com

glnz 11-22-2010 03:47 PM

Re: Does Curve 8530 support WPA2 with AES (or WPA2 with CCMP)?
 
Added note: Maybe my list of encryption methods directly above (WEP, Pre-Shared Key (PSK), PEAP ...) is not a good question. I got that list when I was at home, looked at my Blackberry, saw that I had my usual WiFi connection (WEP) to my home router and then checked the Blackberry's WiFi profile for my router to look at the available encryption methods for the router. That's the list above. None of them says "WPA2" or "WPA2 with AES", which is why I have doubts that my BB has WPA2 with AES.

But maybe the list above is not the issue. Maybe the list shows sub-flavors of either WEP or WPA2 with AES, both of which are already available. That's maybe what the Blackberry Manual for the 8530 is saying - it's unclear to me.

If you think my Blackberry 8530 is already equipped to link with my router using WPA2 with AES, then which of the sub-flavors above should I prefer? I'm at home so I don't want to enter user names, etc.

Obviously, I have no idea what I'm writing about. Your wisdom will be appreciated.

Thanks.

MidnightDraven 11-22-2010 03:48 PM

Re: Does Curve 8530 support WPA2 with AES (or WPA2 with CCMP)?
 
Fair enough.
But I'm not suggesting only using it, I'm suggesting using it as well as any network security [wep etc].
I imagine there are multitudes of unsecured, easier to hack wi-fi's than one with both a security[wep, wpa with psk etc] AND mac filtering.

glnz 11-22-2010 05:04 PM

Re: Does Curve 8530 support WPA2 with AES (or WPA2 with CCMP)?
 
Bump. Thanks, Midnight, but I want to get away from the issue of MAC addresses and back to the question whether the Blackberry Curve 8530 supports WPA2 with AES (or WPA2 with CCMP).

Does it? Does anyone know?

If it does, what does my list above (WEP, Pre-Shared Key (PSK), PEAP ...) mean?

Thanks.

MidnightDraven 11-23-2010 03:17 AM

Re: Does Curve 8530 support WPA2 with AES (or WPA2 with CCMP)?
 
Ok, I'm only assuming (somewhat) here.
WPA and WPA2 are PSK, and the type of encryption can be AES or TKIP.
Therefore it theorectically should work.

WPA2 however, is newer, and I found older devices [any wi-fi device] can't find it as a network.
The only way you're going to find out for sure is to try it.

Goofball222 12-04-2010 10:29 AM

Re: Does Curve 8530 support WPA2 with AES (or WPA2 with CCMP)?
 
WPA2-PSK/CCMP/AES should work just fine on your 8530. I'm using that exact setup for my wifi network here at home and have been since I got the 8530. WPA2+AES is the minimum wifi security level you should be running at this time unless you decide/want to run a totally open network.

Make sure you use a strong passphrase when you set your wifi up. Shorter and less complex passphrases are vulnerable to dictionary attacks. Your network is only as secure as its weakest link.

MAC filtering as a security measure is useless as well as a pain in the butt to maintain and troubleshoot. It is trivial for someone with a little knowledge and some publicly available easy to use tools to sniff and spoof a MAC address from one of your devices and bypass the MAC filter and access your wifi network in no time.

WEP is actually worse than an open unsecured network because it gives the illusion of having security when there is actually none. WEP can be broken by those same publicly available easy to use tools in real time in seconds.

WPA uses TKIP which has known and exploitable flaws that can again be attacked and broken with publicly available utilities.

Wired Equivalent Privacy - Wikipedia, the free encyclopedia - WEP
Wi-Fi Protected Access - Wikipedia, the free encyclopedia - WPA

kumarajinder 12-04-2010 12:51 PM

Re: Does Curve 8530 support WPA2 with AES (or WPA2 with CCMP)?
 
If you want to be sure, you can configure the AP for WPA2/AES & try connecting the BB (though Goofball222 has already confirmed it).

I have 8520 & it works in my home WiFi which is configured for MAC+WPA2+AES.

glnz 12-04-2010 02:42 PM

Re: Does Curve 8530 support WPA2 with AES (or WPA2 with CCMP)?
 
Hey guys - thanks for your very good info. As soon as I get a break I'll try it. But which of these subflavors corresponds to WPA2 with AES?

Pre-Shared Key (PSK)
PEAP
LEAP
EAP-TLS
EAP-FAST
EAP-TTLS
EAP-SIM
EAP-AKA

That's the list of options on my Blackberry for the link to my home WiFi router. Thanks!

MidnightDraven 12-04-2010 02:52 PM

Re: Does Curve 8530 support WPA2 with AES (or WPA2 with CCMP)?
 
Pre-shared Key
because you enter a password to connect.

glnz 12-13-2010 10:35 AM

Re: Does Curve 8530 support WPA2 with AES (or WPA2 with CCMP)?
 
To all above - Success! This weekend, I finally had the opportunity to switch my router from WEP to WPA2 with AES, and it all worked fine. It was relatively easy to switch the Blackberry to the same and enter the passkey. Same for my wife's laptop connecting to our router via WiFi and our wireless printer. One of the generated confirmation reports also shows it is using CCMP.

By the way, I was already using MAC filtering, and that stayed in place as well.

Also, I continue to broadcast my SSID, but from what I've read there's not much security advantage in hiding it. Agree?

THANKS TO ALL.

glnz 12-14-2010 07:56 AM

Re: Does Curve 8530 support WPA2 with AES (or WPA2 with CCMP)?
 
By the way, my modem router says it is now sending WiFi using
WPA type: WPA2
Data Encryption: AES
Authentication Method: Personal (Pre-Shared Key)
Group Key Update Interval: 3600 seconds (<-- Do I need this?)
Frameburst Mode: Disabled
SSID Broadcast: Enabled
MAC Authentication: Enabled

My wireless printer says:
Authentication Type: WPA-PSK
Encryption WPA (AES)

My Blackberry 8530 says:
Security: WPA2-Personal
Connection Mode: Automatic
Connection Data Rate: 48Mbps

A WiFi report emailed from my Blackberry 8530 to myself says:
Security Type: Pre-Shared Key (PSK)
Pairwise Cipher: CCMP
Group Cipher: CCMP

HOWEVER, at home, with my BB very close to the WiFi modem-router, the signal strength and WiFi indicator on the home screen only are a bit erratic. (I see the WiFi indicator bright white on other screens.) Any clues?

Thanks.

OVERKILL 12-20-2010 02:09 PM

Re: Does Curve 8530 support WPA2 with AES (or WPA2 with CCMP)?
 
Quote:

Originally Posted by MidnightDraven (Post 1676623)
Easier solution:
Enable MAC address filtering on your router to allow access to only those MAC addresses you want.
Enter the BB WLAN MAC address [along with any other device].

This will allow only those MAC addresses to connect.


MAC filtering and SSID hiding are two of the three biggest security facades out there for WiFi. They, like WEP, give the illusion of security, whilst not really providing any.

It is incredibly easy to spoof a MAC address. And if you already have WPA-level protection in place and somebody is trying to compromise your network... It would be safe to assume that finding out your SSID and spoofing a MAC are going to be rather elementary for them.

CoffeeDog 04-02-2011 09:50 AM

Re: Does Curve 8530 support WPA2 with AES (or WPA2 with CCMP)?
 
I got mine CURVE 8530 working on home wireless today.

Home Wireless Router: Linksys E1000, WPA2-Personal

This is the way I did:
1. On my 8530, got "Setup Wi-Fi Network"
2. "Next"
3. "Scan For Network"
4. Click on your home wireless network it found.
5. BB tells me"This Wireless Router Supports... PIN(Which your Blackberry will generate) click Next.
6. Enter this PIN into my wireless router: xxxxxxx
7. Login to my Linksys E-1000, go to "Wireless/Basic Wireless Settings", at "Configure View" choose "Wi-Fi Protected Setup"
8. I see "2. If your client device has a Wi-Fi Protected Setup PIN number, enter that number here ", enter the pin your 8530 generates, then "Register".
9. a congratulation message appears.
10. It takes about 1 minute for my 8530 connects to the network, and I see WI-FI icon on your 8530 desktop turns to white color.
11. I am connected!


All times are GMT -5. The time now is 11:49 AM.

Powered by vBulletin® Version 3.6.12
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.