3.4 Wireless Security Flashcards
WPA2
Wi_Fi Protected Access 2 (WPA2)
Uses encryption CCMP block cipher mode
CCMP provides: Data confidentiality with AES
Message Integrity Check (MIC) with CBC-MAC
WPA3
Wi_Fi Protected Access 3 (WPA3)
Uses Encryption GCMP block cipher mode.
GCMP is a stronger encryption than WPA2
Provides data integrity but for message integrity check (MIC) uses GMAC
SAE
Simultaneous Authentication of Equals
Allows session keys to be shared without actually sending the key through the network
PSK
Pre Shared Key
Pre shared keys that are made to be shared.
802.1X (enterprise)
A standard that allows you to remove someone access but allows everyone else.
Open System
Basically this a network that does not require a password.
Like public wifi it gives you a session key and will remain connected until you dissociate from that network.
Captive Portal
Allows you to authenticate through separate login screen different from your browser.
WPS
Wi-Fi Protected Setup
easy method for configuring a wireless setup.
liable for brute forces attacks because it uses an identification number
EAP
Extensible Authentication Protocol (EAP)
EAP-FAST
Allows protected information to be shared.
PEAP
Protected Extensible Authentication Protocol
Sends digital certificate to a web server for authentication
EAP TLS
Requires digital certificates to all devices. Id the devices dosent have it the can not connect
EAP TTLS
Requires a single digital certificate. Allows you to send digital certificates within a TLS Tunnel
RADIUS Federation
Use for traveling. Allows users to authenticate to another organization while using the same username and password.
Site Surveys
Identifying existing access points or wireless land scape.
