Examkin

Question

Difficulty: MediumWireless Security Standards and Encryption Protocols

A network administrator is documenting the cryptographic baselines for wireless security standards across company facilities. Match each wireless security protocol standard on the left with its primary encryption protocol and integrity mechanism on the right.

  • WEP (Wired Equivalent Privacy)Uses RC4 stream cipher with a 24-bit Initialization Vector (IV) and CRC-32 for integrity check.
  • WPA (Wi-Fi Protected Access)Implements Temporal Key Integrity Protocol (TKIP) with RC4 and the Michael message integrity check.
  • WPA2 (Wi-Fi Protected Access 2)Mandates Counter Mode Cipher Block Chaining Message Authentication Code Protocol (CCMP) using AES.
  • WPA3 (Wi-Fi Protected Access 3)Requires Simultaneous Authentication of Equals (SAE) and Galois/Counter Mode Protocol (GCMP-256) encryption.

Answer

WEP corresponds to RC4 with a 24-bit IV and CRC-32; WPA corresponds to TKIP with RC4 and Michael MIC; WPA2 corresponds to CCMP utilizing AES; WPA3 corresponds to SAE authentication with GCMP-256 encryption.
Each wireless security standard aligns strictly with its cryptographic design: WEP relies on RC4 with 24-bit IVs and CRC-32, WPA uses TKIP to wrap RC4 dynamic keys with Michael MIC, WPA2 standardizes CCMP using AES block ciphers, and WPA3 leverages SAE key exchange with GCMP-256 authenticated encryption.

Step-by-Step Solution

1
Identify the cryptographic mechanism used by legacy WEP.
WEP uses RC4 with a short 24-bit IV and CRC-32 for payload validation.
This is the legacy standard susceptible to key recovery attacks within minutes.
2
Identify the transitional mechanisms introduced with WPA.
WPA introduced TKIP to dynamically rotate keys while maintaining RC4 hardware compatibility, using Michael MIC for tamper detection.
TKIP served as a backward-compatible firmware upgrade path from WEP.
3
Identify the core standard protocol mandated by WPA2.
WPA2 mandates CCMP, which uses AES in Counter Mode with CBC-MAC.
AES replacement of RC4 satisfies IEEE 802.11i security mandates.
4
Identify the next-generation protocol suite used by WPA3.
WPA3 mandates SAE (Dragonfly key exchange) to prevent offline dictionary attacks and uses GCMP-256 for enhanced data confidentiality.
SAE provides forward secrecy and replaces vulnerable PSK handshakes.

Key Concept

Wireless Security Standards Evolution and Cipher Pairings
Rate this question

Topics

Wireless Security Standards and Encryption Protocols

More questions from this topic