CompTIA Security+: SY0-601 Certification Guide Second Edition by Ian Neil

Author:Ian Neil
Language: eng
Format: epub
Publisher: Packt Publishing Ltd.
Published: 2020-12-22T00:00:00+00:00

Wi-Fi Protected Access Version 3 (WPA3)

Let's now look at WPA3 and its features, which replaced WPA2. At the time of writing, this is 15 years old.

Wi-Fi Protected Access Version 3 (WPA 3) was released in 2018 to address the weaknesses in WPA2 and uses a much stronger 256-bit Galois/Counter Mode Protocol (GCMP-256) for encryption. There are two versions, WPA3-Personal for home users, and WPA3-Enterprise for corporate users.

Let's look at some of the features of WPA3:

Protected Management Frames (PMF): This can provide multicast transmission and has the ability to protect wireless packets against Initialization Vector (IV) attacks where the attacker tries to capture the encryption keys.

Simultaneous Authentication of Equals (SAE): SAE is used with WPA3-Personal and replaces the WPA2-PSK. SAE uses a very secure Diffie Hellman handshake, called dragonfly, and protects against brute-force attacks. It uses Perfect Forward Secrecy (PFS), which ensures that your session keys cannot be compromised and is immune to offline attacks.

Wi-Fi Easy Connect: This makes it very easy to connect IoT devices, such as a smartphone, by simply using a QR code.

WPA3-Enterprise: WPA3 has an enterprise version that supports 256-bit AES, whereas, WPA2 only supported 128 bits, making it suitable for the government and finance departments. It uses Elliptic-Curve Diffie Hellman Ephemeral (ECDHE) for the initial handshake.

WPA3-Personal: This uses SAE, which means that users can use passwords that are easier to remember. It also uses PFS, which means the traffic is secure even if the password has been compromised. It is easier to connect IoT devices.

Wi-Fi Enhanced Open: This is an enhancement of WPA2 open authentication, where it uses encryption for open authentication. It can be used in public areas such as hotels, cafés, and airports, where no password is required, and this prevents eavesdropping as it uses PMF.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.