Question

Difficulty: MediumWireless Security Standards and Encryption Protocols

A network security administrator is documenting legacy and modern wireless security protocols for a corporate compliance audit. Match each wireless security standard on the left with its corresponding encryption cipher and integrity mechanism on the right.

  • WEP (Wired Equivalent Privacy)RC4 stream cipher with a 24-bit Initialization Vector (IV) and CRC-32 integrity checking
  • WPA (Wi-Fi Protected Access)RC4 stream cipher utilizing Temporal Key Integrity Protocol (TKIP) and Michael MIC
  • WPA2 (Wi-Fi Protected Access 2)AES block cipher using Counter Mode Cipher Block Chaining Message Authentication Code Protocol (CCMP)
  • WPA3-PersonalAES block cipher using Galois/Counter Mode Protocol (GCMP-128) with Simultaneous Authentication of Equals (SAE)

Answer

WEP pairs with RC4, 24-bit IV, and CRC-32; WPA pairs with RC4, TKIP, and Michael MIC; WPA2 pairs with AES-CCMP; WPA3-Personal pairs with AES-GCMP-128 and SAE.
Wireless standards evolved systematically: WEP used simple RC4 with CRC-32; WPA upgraded legacy hardware with RC4 wrapped in TKIP; WPA2 introduced mandatory AES-CCMP; and WPA3-Personal implemented AES-GCMP-128 combined with SAE.

Step-by-Step Solution

1
Analyze WEP cryptographic construction
WEP uses RC4 with a 24-bit IV and CRC-32.
WEP is the oldest standard and relied on unencrypted 24-bit IV headers and non-cryptographic CRC-32 integrity checks.
2
Analyze WPA cryptographic construction
WPA uses RC4 with TKIP and Michael MIC.
WPA was designed to run on WEP legacy hardware by wrapping RC4 in TKIP key mixing and adding the Michael MIC algorithm.
3
Analyze WPA2 cryptographic construction
WPA2 uses AES with CCMP.
WPA2 introduced 802.11i compliance, requiring hardware-based AES encryption coupled with Counter Mode CBC-MAC Protocol (CCMP).
4
Analyze WPA3-Personal cryptographic construction
WPA3-Personal uses AES-GCMP-128 with SAE.
WPA3 upgrades baseline encryption to GCMP and mandates SAE key exchange to block offline dictionary attacks.

Key Concept

Wireless Security Standards and Encryption Protocols
Rate this question