WPA-PSK(8)              OpenBSD System Manager's Manual             WPA-PSK(8)

NAME
     wpa-psk - passphrase to WPA pre-shared key mapping

SYNOPSIS
     wpa-psk ssid passphrase

DESCRIPTION
     wpa-psk generates a 256-bit pre-shared key from a service set identifier
     (SSID) and a passphrase.  The passphrase must be a sequence of between 8
     and 63 ASCII-encoded characters.  The length of the SSID must be between
     1 and 32 octets.

     wpa-psk prints the generated pre-shared key to stdout as a series of 64
     hexadecimal digits preceded by `0x'.  The output is intended to be passed
     to ifconfig(8) via the wpapsk option.  The ssid parameter should be the
     same as the nwid parameter passed to ifconfig(8) via the nwid option.

     To generate the pre-shared key, wpa-psk uses the Password-Based Key
     Derivation Function 2 (PBKDF2).  The passphrase is hashed 4096 times us-
     ing HMAC-SHA1.

SEE ALSO
     ifconfig(8)

     Medium Access Control (MAC) Security Enhancements, IEEE Std 802.11i,
     2004.

     Password-Based Cryptography Standard, PKCS #5 v2.0, 1999.

     US Secure Hash Algorithm 1 (SHA1), RFC 3174, 2001.

OpenBSD 4.7                     April 16, 2008                               1
