Examkin

Soru

Zorluk: ZorWireless Security Standards and Encryption Protocols

As part of a wireless security assessment, an engineer must accurately map each IEEE 802.11 cryptographic protocol to its underlying encryption algorithm and message integrity mechanism. Match each protocol on the left to its matching cryptographic pair on the right.

  • GCMP-256AES stream/block cipher operating in Galois/Counter Mode delivering authenticated encryption with 256-bit key length
  • CCMP-128AES operating in Counter Mode combined with Cipher Block Chaining Message Authentication Code for 128-bit encryption and integrity
  • TKIPRC4 stream cipher paired with the Michael hashing algorithm to provide legacy key mixing and frame integrity check
  • BIP-GMAC-256Galois Message Authentication Code implementation under 802.11w designed specifically to safeguard broadcast and multicast management frames

Cevap

GCMP-256 matches AES in Galois/Counter Mode (256-bit key). CCMP-128 matches AES in Counter Mode with CBC-MAC (128-bit key). TKIP matches RC4 stream cipher with the Michael algorithm. BIP-GMAC-256 matches Galois Message Authentication Code under 802.11w for broadcast/multicast management frames.
Each protocol correctly pairs with its cryptographic specification: GCMP-256 uses AES in Galois/Counter Mode with 256-bit keys; CCMP-128 uses AES Counter Mode with CBC-MAC; TKIP pairs RC4 with the Michael integrity check algorithm; and BIP-GMAC-256 provides Galois MAC integrity protection for broadcast management frames.

Adım Adım Çözüm

1
Identify the cryptographic suite requirements for high-strength WPA3 Enterprise (192-bit mode).
GCMP-256 provides 256-bit authenticated encryption via Galois/Counter Mode.
WPA3 Enterprise 192-bit security relies on GCMP-256 as its primary data protection cipher.
2
Analyze standard IEEE 802.11i baseline encryption (CCMP-128).
CCMP-128 pairs AES in Counter Mode (CTR) for encryption with CBC-MAC for integrity.
This is the mandatory baseline cipher suite for standard WPA2 and WPA3 Personal.
3
Examine legacy protocol primitives for TKIP.
TKIP wraps RC4 encryption with the Michael Message Integrity Check (MIC).
TKIP was created to fix WEP vulnerabilities without requiring new hardware, utilizing RC4 and Michael.
4
Determine the management frame integrity protocol for broadcast traffic.
BIP-GMAC-256 uses Galois MAC to protect group management frames under Protected Management Frames (PMF).
Broadcast Integrity Protocol (BIP) safeguards deauthentication and disassociation broadcast frames from spoofing attacks.

Anahtar Kavram

Wireless Cipher Suites and Integrity Mechanisms
Bu soruyu puanla

Konular

Wireless Security Standards and Encryption Protocols

Bu konudan daha fazla soru