26 September 2012

wireless security a small peep

802.11i defines set of procedures (RSN) that tells how keys are derived and distributed.
802.11i provides sophisticated authentication using a variety of protocols (PSK, 802.1X) and strong security with the AES-CCMP encryption protocol.
WEP
--> uses RC4 encryption

WPA - draft of 802.11i (Home and small office)
TKIP
-> automatic key management (key mixing)
-> per-frame keying (key mixing)
-> sequence counter / 48bit IV (replay protection)
-> new message integrity check (Michael integrity check)
=> uses RC4 encryption

WPA2 - 802.11i - RSN (Home and small office)
CCMP - AES

RSN
The earlier EAP exchange or WPA2-PSK has provided the shared secret key PMK
PTK = PBKDF2-SHA1(PMK + ANonce + SNonce + AP MAC + STA MAC)


RSN packets
PEAP packets
WEP - Wired Equivalent Privacy
WPA - WiFi Protected Access
TKIP - Temporal Key Integrity Protocol
CCMP - Counter Mode with CBC-MAC Protocol

RSN - Robust Security Network
PMK - Pairwise Master Key
PTK - Pairwise Transient Key

PEAP