republican-creole
Search:  

 
 
   News
newer
story category Wi-Fi Security Upgrade
802.11i (WPA2) ratified in June
(old news - 12:49PM Friday May 07 2004)
tags: wireless · security
InfoWorld reports that the 802.11i Wi-Fi security standard should be ratified this June, and certified under the name WPA2. The standard is one of the first to make use of the 128-bit encryption technology known as AES (Advanced Encryption Standard). Unfortunately, the standard will require significant hardware and software upgrades, since many network cards and access points can't properly handle the higher level of encryption; though according to Wi-Fi Networking News, the majority of Wi-Fi chips shipped since 2002 should be powerful enough to handle the new spec, and will simply need firmware upgrades.

Related:
  1. Tuesday Morning Links
  2. FBI Gets DS3 Backdoor Into Verizon Wireless Network?
  3. Steal Wi-Fi In Maryland? Face 3 Year Prison Stretch
  4. Cell Phones and VoIP Calls Easy to Hack
  5. Tuesday Morning Links
  6. Friday Evening Links
  7. Using GPUs To Speed Up WPA Hacks
  8. WPA Wi-Fi Encryption Is Partially Cracked
Forums » Wi-Fi Security Upgrade
view: topics flat text 
Post a:

kaisa
Premium
join:2002-08-20
Glen Ellyn, IL
clubs:

faster?

Is 802.11i supposed to be faster than G?

Is AES better than WEP?

Morac

join:2001-08-30
Riverside, NJ

Re: faster?

802.11i has nothing to do with speeds; it only deals with security. And yes, it is much better than WEP.

kaisa
Premium
join:2002-08-20
Glen Ellyn, IL
clubs:

Re: faster?

good times, thanks

kalphearion
In nomine Patri
Premium
join:2003-11-08
Denver, CO
clubs:
·Comcast

said by kaisa See Profile:

Is AES better than WEP?

From my understanding, AES was/is widely used for Government security of encryption. Yes AES will be better than WEP due to the fact it is more powerful. Unfortunatley, most hardware out there will not be able to handle it, and you will end up spending more money, at leaste for a home user to take advantage of it

Maybe on a business stand point, AES will benefit, but as for a home user, WEP will do the trick.

my 2cents

Brian

zoom314
Superman
Premium
join:2001-04-30
Yermo, CA

Re: faster?

said by kalphearion See Profile:
said by kaisa See Profile:

Is AES better than WEP?

From my understanding, AES was/is widely used for Government security of encryption. Yes AES will be better than WEP due to the fact it is more powerful. Unfortunatley, most hardware out there will not be able to handle it, and you will end up spending more money, at leaste for a home user to take advantage of it

Maybe on a business stand point, AES will benefit, but as for a home user, WEP will do the trick.

my 2cents

Brian

AES? What's that? It wasn't mentioned until the 2nd poster brought It up.

I belive that WPA2 is much better than WEP and AES(Whatever that is), Which is now supported by Windows XP Home & Pro. Go download the update for It If You have not already done so.

And I don't believe AES is supported by XP.

WEP do the trick? WEP is weak and has been broken from what TechTV says.
--
Charter Pipeline rules in Hesperia, CA, Verizon (ex-GTE) sucks...

Rhobite
Premium
join:2002-02-24
Cambridge, MA
clubs:
AES is an encryption method, WEP is a communications protocol. They aren't directly comparable. But 802.11i will be much more secure than WEP.
--
Jimmysquid.com - I take pictures.

jdmurray
Premium
join:2001-03-02
Huntington Beach, CA
clubs:

Re: faster?

It'd be more "apples and apples" to compare AES with RC4, the encryption method used by WEP.

AES succeeds 3DES as the gov'ment's encryption method of choice. A proper implementation of AES is a helluva lot more computationally efficient than 3DES. This means your PDA can now not only support WPA 2.0 but also IPSec.

Nerdtalker
Working Hard, Or Hardly Working?
Premium,MVM
join:2003-02-18
Tucson, AZ
clubs:
·Comcast

said by Rhobite See Profile:
AES is an encryption method, WEP is a communications protocol. They aren't directly comparable. But 802.11i will be much more secure than WEP.

That's good to hear, WEP is laughably insecure.
--
Science-fiction yesterday, fact today, obsolete tomorrow. - Otto O. Binder

Morac

join:2001-08-30
Riverside, NJ
·Comcast

Upgrades

Ratified in June, that means Linksys should post a firmware upgrade for my WRT54G around 2006.

I've given up on them ever implementing WPA let alone this in my 802.11b devices.
--

The Comcast Disney Avatar has been retired.

DrTCP
Yours truly
Premium,ExMod 1999-04
join:1999-11-09
Round Rock, TX

Re: Upgrades

said by Morac See Profile:
Ratified in June, that means Linksys should post a firmware upgrade for my WRT54G around 2006.

I've given up on them ever implementing WPA let alone this in my 802.11b devices.

I think Linksys has implemened a WPA driver for WPC11 v2.5 and 3.0.

ZyXEL has working WPA drivers for most of their B series PCMCIA client cards. B-100, B-120, B-122 (it took a long time for them though)

Unfortunately, most vendors did not do enough effort to provide such capability.

I think once 802.11i is ratified and WPA2 is adopted it would be a good time to upgrade old 802.11b cards.
theeinstein
Premium
join:2003-07-31
Fernandina Beach, FL
Hey if the new method will be ratified in June... then Linksys will have a upgrade for it in May but it will screw everything else up and not work right until December...

haha

=)

flw
Security Is Like An Onion, It Has Layers
Premium
join:2004-01-04
·Verizon Online DSL


1 edit

firmware upgradable?

My understanding has always been than existing b/g hardware would not be firmware upgradable to 802.11i/WPA2 due to various cpu and other hardware alterations within the circuits? As mentioned in the Article itself.

Dan
--
"Keep your friends close and your enemies even closer"

»www.byronil.org

Supafly
Premium
join:2000-07-15
Lancaster, CA

Re: firmware upgradable?

If the card or access point has a dedicated AES chip (I believe Zyxel and some Netgear's has this) all it would take is a software/firmware upgrade to use the cchip for AES processing.

DrTCP
Yours truly
Premium,ExMod 1999-04
join:1999-11-09
Round Rock, TX

Re: firmware upgradable?

said by Supafly See Profile:
If the card or access point has a dedicated AES chip (I believe Zyxel and some Netgear's has this) all it would take is a software/firmware upgrade to use the cchip for AES processing.

WPA support should be in the Radio unless the vendor is implementing host mode AP functions (processing and encrypt/decrypt raw frames in CPU environment). Most AP implement AP functions in the card firmware itself (firmware AP). They download the AP firmware to the card and card (wireless module) does the enryption and decryption. For this reason if the card firmware could be upgraded to handle AES than WPA2 upgrade could be done.

DrTCP
Yours truly
Premium,ExMod 1999-04
join:1999-11-09
Round Rock, TX

said by flw See Profile:
My understanding has always been than existing b/g hardware would not be firmware upgradable to 802.11i/WPA2 due to various cpu and other hardware alterations within the circuits? As mentioned in the Article itself.

Dan

I believe soft radio based 802.11b/g cards should be able to support the new standard. Atheros and Broadcom 802.11b/g and 802.11a/b/g cards come to mind.

flw
Security Is Like An Onion, It Has Layers
Premium
join:2004-01-04
·Verizon Online DSL

Well after the begining of June, well see if any mfg firmware updates come out b/g producs and which ones do/don't.
--
"Keep your friends close and your enemies even closer" »www.byronil.org

DrTCP
Yours truly
Premium,ExMod 1999-04
join:1999-11-09
Round Rock, TX

WPA2 is a certified name for IEEE 802.11i

WPA is a specification of Wi-Fi consortium based on draft IEEE 802.11i standard. WPA2 will be based on the final 802.11i standard.

Wi-Fi is a private industry group while IEEE is a standards body. Wi-Fi does not certify IEEE standards. They can only adopt them like they did for WPA and WPA2. They can then certify vendor products to WPA2. But that does not mean they are a body to certify IEEE 802.11 standards.

Air WAV

join:2000-09-16
Saint Louis, MO

Re: WPA2 is a certified name for IEEE 802.11i

We currently use AES encryption on our 5.8 radios for HIPPA compliancy.
--
»www.AWirelessGateway.com

DrTCP
Yours truly
Premium,ExMod 1999-04
join:1999-11-09
Round Rock, TX


2 edits

Re: WPA2 is a certified name for IEEE 802.11i

said by Air WAV See Profile:
We currently use AES encryption on our 5.8 radios for HIPPA compliancy.

Well, some WLAN chipset vendors implemented AES as an proprietary extension of WPA but it is not part of WPA specification. For 802.11i/WPA2 there are more changes than simply AES. In other words,

WPA + AES <> WPA2

(However vendors that implemented AES with WPA is probably pretty close to WPA/802.11i)

Defcon888
Premium
join:2003-07-22
San Bruno, CA

Um... AES, TKIP, What ?

What is the difference between WPA's TKIP and AES? Or are they two different things, or the same thing?

I'm confused.

Thanks.
--
I'm only level 3... sad isn't it? =)
macmouse
Premium
join:2002-05-30
Saratoga, CA

Re: Um... AES, TKIP, What ?

After some quick google searching...

WAP is a communication protocols. Inside of it, can be used a encryption code. Or several at this point.

TKIP=A "framework" for the use of encryption. Essentially, how the two machines exchange "passwords" and verify the data.

The actual encryption code, is used using said "password" to make your data unreadable to other people.

In this case,
RC4 is the legacy code. It has been around for ages, but "everyone" uses it.
It can be "reasonably" secure within a good implementation.
Although, the big problem was WEP (802.11b) had a really bad implementation, so it could be broken in a day or so.
Developed in 1987.

RC5 (the next version) has been around for some time now in production servers (1994).
For the time being, it is secure.

[Both were created by RSA, a private company]

The AES (Advanced Encryption Standard) standard was "made" by the US government via a contest + committee. Finalized in 2001. It is considered to be very secure.

However, It is limited to sensitive but not-classified data...
The NSA probably know something that we don't... Still, that's pretty darn good.
fireflyFever

join:2004-05-10
Jacksonville, FL

Re: Um... AES, TKIP, What ?

....RSA Security is a "public company "with more than 1,000 integration partners:p
macmouse
Premium
join:2002-05-30
Saratoga, CA


1 edit

Re: Um... AES, TKIP, What ?

Well, depending upon your definition. ;p

What I meant its a private company, in that is isn't a *government* organisation. That it is business operated independently of the military/CIA/whatever. (well, presumably anyway). RSA is a business, with investors.
The technology RSA invents, RSA owns. [Unless you pay royalties or the patent expires]

AES, was formed by the National Institute of Standards and Technology (NIST) using public funds (tax money). As such, anyone can use the code without paying royalties.

en.wikipedia.org/wiki/Advanced_E···tandard]

Edit: It looks like they changed their minds later, and you can use AES now for "top secrete" information. Providing, your using 256 bit and approved software.
fireflyFever

join:2004-05-10
Jacksonville, FL

Re: Um... AES, TKIP, What ?

interesting makes me wonder .256 bit software;like what for instance?

bigdaddy17

join:2003-05-08
Miami, FL

compatibility?

Would 802.11i be compatible with 802.11a/b/g?
Forums » Wi-Fi Security Upgrade


Saturday, 04-Jul 17:57:42 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 9.5 years online! © 1999-2009 dslreports.com.republican-creole