Wireless Protocols (Memorize)

Question 1

WPA

• Type of protocol
• Vulnerabilities
• Crypto protocols
• Mode

Answer 1

WPA
Wifi Protected Access
-A wireless security protocol
-Replacement for WEP
-Susceptible to PW cracking attacks
-Replaced by WPA2
-Uses TKIP (Temporal Key Integrity Protocol, vulnerable) or AES (strong) encryption
-WPA with TKIP vulnerable to replay attacks

• Allows Pre-Shared Key Mode
• User accesses network anonymously with PSK or passphrase
• Does not authenticate - authorization only

Question 2

WPA2

• Type of protocol
• Type of encryption
• Mode

Answer 2

WPA2
Wifi Protected Access
-A wireless security protocol
-CCMP (Counter Mode Cipher Block Chaining) encryption, based on AES
-Allows Pre-Shared Key Mode

Question 3

PSK

• What uses
• Which part of AAA?

Answer 3

Pre-Shared Key Mode

• WPA and WPA2 can operate in this mode
• User accesses network anonymously with PSK or passphrase
• Does not authenticate - authorization only

Question 4

Enterprise Mode

Answer 4

• Forces users to authenticate (password or certificate)
• 802.1X server, often RADIUS
• To enable enterprise mode on router: enter RADIUS server & RADIUS port & shared secret

Question 5

EAP

• What kind of protocol
• What does it do
• What crypto protocol uses?
• What wifi security standards use?

Answer 5

EAP
Extensible Authentication Protocol
-A wireless authentication protocol
-Secure encryption key used to encrypt all data transmitted between devices
-TKIP and CCMP (more secure) use this key
-WPA and WPA2 use five EAP types for authentication: EAP-FAST, EAP-TLS, EAP-TTLS, PEAP

Question 6

EAP-FAST

Answer 6

EAP-FAST
EAP Flexible Authentication via Secure Tunnel
-A wireless authentication protocol
-Cisco's replacement for LEAP
-Supports optional certificates
-Lightweight and secure

Question 7

EAP-TLS

Answer 7

EAP-TLS
EAP-Transport Layer Security
-A wireless authentication protocol
-Requires certificate on 802.1X server AND each wireless client
-Strong security, wide adoption

Question 8

EAP-TTLS

Answer 8

EAP-TTLS
EAP-Tunneled TLS
-A wireless authentication protocol
-TLS tunnel
-Extension of PEAP
-Requires certificate on 802.1X server, NOT clients

Question 9

PEAP

Answer 9

PEAP
Protected Extensible Authentication Protocol
-A wireless authentication protocol
-Protected PEAP
-Encapsulates and encrypts EAP conversation in TLS tunnel
-Requires certificate on server, not clients
-Microsoft CHAPv2 is implementation

Question 10

TKIP

Answer 10

TKIP
Temporal Key Integrity Protocol, vulnerable
-Legacy wireless security protocol
-CCMP is the replacement

Question 11

CCMP

Answer 11

CCMP
Counter Mode Cipher Block Chaining Message Authentication Code Protocol
-The best encryption protocol to use with WPA2
-Uses AES