Wireless Encryption
Summary
PDF p.249Wireless networks must be configured with security settings to prevent unauthorized access and data interception. Various Wi-Fi security standards, such as WPA, WPA2, and WPA3, provide different levels of encryption and authentication.
In plain words
Supplementary — not from your PDFWithout encryption, anyone in range can read Wi-Fi traffic. WPA replaced the broken WEP using RC4 with TKIP. WPA2 uses AES with CCMP. WPA3 adds SAE for secure key exchange, Enhanced Open (encryption even on open networks), and stronger cryptography. WPS makes setup easy with a button or PIN, but the PIN can be brute-forced, so disable it. Easy Connect (DPP) replaces WPS with public/private key pairs and QR codes or NFC tags.
Detailed explanation
PDF p.249- Importance of Encryption: Without encryption, anyone within range can intercept and read packets on the wireless network.
- Security Standards: Determine cryptographic protocols, key generation methods, and authentication processes.
Wi-Fi Protected Access (WPA)
- WPA: Designed to fix vulnerabilities in WEP, uses RC4 stream cipher with TKIP for stronger security.
- WPA2: Uses AES with CCM for authenticated encryption, replacing RC4 and TKIP.
- WPA3: Introduces SAE for secure key exchange, Enhanced Open for encrypted traffic without a password, and updated cryptographic protocols with AES GCM.
Wi-Fi Protected Setup (WPS)
- Purpose: Simplifies secure setup for residential consumers.
- Method: Uses a push button or PIN for device association.
- Vulnerabilities: Susceptible to brute force attacks; some models may not fully disable WPS.
Easy Connect (DPP)
- Replacement for WPS: Uses public/private key pairs and QR codes or NFC tags for secure device configuration.
- Benefits: Fixes security issues with WPS and simplifies configuration for IoT devices.
Important terms
taken from the text above- Importance of Encryption
- Without encryption, anyone within range can intercept and read packets on the wireless network.
- Security Standards
- Determine cryptographic protocols, key generation methods, and authentication processes.
- WPA
- Designed to fix vulnerabilities in WEP, uses RC4 stream cipher with TKIP for stronger security.
- WPA2
- Uses AES with CCM for authenticated encryption, replacing RC4 and TKIP.
- WPA3
- Introduces SAE for secure key exchange, Enhanced Open for encrypted traffic without a password, and updated cryptographic protocols with AES GCM.
- Replacement for WPS
- Uses public/private key pairs and QR codes or NFC tags for secure device configuration.
Examples & real-world scenarios
Supplementary — not from your PDF- Configuring a new AP for WPA3 only.
- Turning off WPS on a home router.
- Onboarding an IoT sensor by scanning its DPP QR code.
Scenario
A small office uses WPA2 with WPS enabled. Because the WPS PIN is weak, disabling WPS (and moving to WPA3 where devices support it) is a quick, effective improvement.
Common mistakes
Supplementary — not from your PDF- Leaving WPS enabled because it's convenient.
- Mixing up the ciphers: WPA uses TKIP/RC4; WPA2 uses AES/CCMP.
Practical skills
Supplementary — not from your PDF- Choose the right Wi-Fi security settings for home, small office and enterprise.
What I should remember
Key Points PDF p.249-
WPA Versions
- WPA: RC4 with TKIP.
- WPA2: AES with CCM.
- WPA3: SAE, Enhanced Open, AES GCM.
-
WPS
- Simplifies Setup: Push button or PIN method.
- Security Risks: Vulnerable to brute force attacks.
-
Easy Connect
- Secure Configuration: Uses QR codes or NFC tags.
- IoT Devices: Simplifies setup for headless devices.
Wi-Fi Standards
- Wi-Fi 6 (802.11ax): Latest generation, supports WPA3.
- Wi-Fi 5 (802.11ac) and Wi-Fi 4 (802.11n): Earlier standards, some devices support WPA3 with updates.