Hola! Discrepo, segun wikipedo (y la persona q me lo explico...):
In Shared Key authentication, the WEP key is used for authentication. A four-way challenge-response handshake is used:
1. The client station sends an authentication request to the Access Point.
2. The Access Point sends back a clear-text challenge.
3. The client has to encrypt the challenge text using the configured WEP key, and send it back in another authentication request.
4. The Access Point decrypts the material, and compares it with the clear-text it had sent. Depending on the success of this comparison, the Access Point sends back a positive or negative response.
After the authentication and association, the pre-shared WEP key is also used for encrypting the data frames using RC4.
Por eso a veces aunke captures cientos d e miles de IV`s muchas veces falla, mas all de si la captura esta corrupta o no
EDITO: Pinty, olvida mi discrepancia, al final estaba diciendo lo mismo q tu