I remember that paper. The researchers ran a de-auth attack and then attempted to brute force the key.

It isn't worth reading.