I believe an answer is to setup a SoftAP, hostapd or airbase-ng so no other traffic besides the ipad/iphone is connected. Use wireshark to capture the packets, either use wireshark or bittwist to decrypt to find the hash and crack the hash with hackhat, oclhastcat/cudahashcat or elcomsoft lighting hash crack to crack the hash.