Soru

Zorluk: OrtaWireless Security Standards and Encryption Protocols

A network administrator is documenting the cryptographic baselines for wireless security standards across company facilities. Match each wireless security protocol standard on the left with its primary encryption protocol and integrity mechanism on the right.

  • WEP (Wired Equivalent Privacy)Uses RC4 stream cipher with a 24-bit Initialization Vector (IV) and CRC-32 for integrity check.
  • WPA (Wi-Fi Protected Access)Implements Temporal Key Integrity Protocol (TKIP) with RC4 and the Michael message integrity check.
  • WPA2 (Wi-Fi Protected Access 2)Mandates Counter Mode Cipher Block Chaining Message Authentication Code Protocol (CCMP) using AES.
  • WPA3 (Wi-Fi Protected Access 3)Requires Simultaneous Authentication of Equals (SAE) and Galois/Counter Mode Protocol (GCMP-256) encryption.

Cevap

WEP corresponds to RC4 with a 24-bit IV and CRC-32; WPA corresponds to TKIP with RC4 and Michael MIC; WPA2 corresponds to CCMP utilizing AES; WPA3 corresponds to SAE authentication with GCMP-256 encryption.
Each wireless security standard aligns strictly with its cryptographic design: WEP relies on RC4 with 24-bit IVs and CRC-32, WPA uses TKIP to wrap RC4 dynamic keys with Michael MIC, WPA2 standardizes CCMP using AES block ciphers, and WPA3 leverages SAE key exchange with GCMP-256 authenticated encryption.

Adım Adım Çözüm

1
Identify the cryptographic mechanism used by legacy WEP.
WEP uses RC4 with a short 24-bit IV and CRC-32 for payload validation.
This is the legacy standard susceptible to key recovery attacks within minutes.
2
Identify the transitional mechanisms introduced with WPA.
WPA introduced TKIP to dynamically rotate keys while maintaining RC4 hardware compatibility, using Michael MIC for tamper detection.
TKIP served as a backward-compatible firmware upgrade path from WEP.
3
Identify the core standard protocol mandated by WPA2.
WPA2 mandates CCMP, which uses AES in Counter Mode with CBC-MAC.
AES replacement of RC4 satisfies IEEE 802.11i security mandates.
4
Identify the next-generation protocol suite used by WPA3.
WPA3 mandates SAE (Dragonfly key exchange) to prevent offline dictionary attacks and uses GCMP-256 for enhanced data confidentiality.
SAE provides forward secrecy and replaces vulnerable PSK handshakes.

Anahtar Kavram

Wireless Security Standards Evolution and Cipher Pairings
Bu soruyu puanla