Summary

Security problems led to development of the 802.11i standard and a partial implementation of it, known as WPA. 802.11i introduces robust security protocols, including TKIP and CCMP, plus authentication and key management algorithms. TKIP works with existing WEP encryption hardware, whereas CCMP uses the AES algorithm for stronger security. TKIP uses a key mixing algorithm to protect the base Temporal Encryption Key and to help avoid RC4 weaknesses. It uses the Michael algorithm for message integrity but must protect Michael with additional countermeasures. CCMP uses two different modes of AES, one for confidentiality and the other for message integrity.

802.11i includes key management between APs and stations. Master keys are established ...

Get Cisco Wireless LAN Security now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.