Mathy Vanhoef

In October 2017 Vanhoef published KRACK, the Key Reinstallation Attacks. By replaying a message in the WPA2 four-way handshake, an attacker could make a client reinstall a key already in use and reset its nonce, breaking the encryption. The flaw lived in the standard rather than any one implementation, so nearly every Wi-Fi device was affected. On Linux and Android the reinstalled key was, as a bonus, all zeros.

Dragonblood followed in 2019 with Eyal Ronen: side-channel and downgrade attacks on the SAE handshake in the freshly launched WPA3. Then came FragAttacks in 2021, design flaws in how Wi-Fi fragments and aggregates frames, some of them present since 1997.