Wi-Fi Security Protocols Overview

Wired Equivalent Privacy (WEP)

• Uses a static key (a single key) for encryption
• Offers 64 or 128 bit key encryption in hexadecimal
• Aims to prevent man-in-the-middle attacks

Wi-Fi Protected Access (WPA)

• Replaced WEP
• Uses temporal key integrity protocol (TKIP) for dynamic key changes
• Improved security over WEP by preventing intruders from creating their own encryption keys

Wi-Fi Protected Access 2 (WPA2)

• An upgrade to WPA
• Uses both encryption and authentication
• Offers two modes:
  • Pre-shared key (personal) - WPA2-PSK: relies on a shared passcode and is used in home environments
  • Enterprise mode - WPA2-EAP: more suitable for organizations and businesses
• Employs Counter Mode Cipher Block Chaining Message Authentication Code Protocol (CCMP) to replace TKIP
• CCMP utilizes the advanced encryption standard (AES) algorithm
• Provides message authenticity and integrity verification
• CCMP is stronger and more reliable than TKIP, making it harder for hackers to identify patterns

Wi-Fi Protected Access 3 (WPA3)

• An upgrade to WPA2
• Offers individualized data encryption
• Utilizes Wi-Fi Device Provisioning Protocol (DPP)
• Allows Near Field Communication (NFC) tags or QR codes for device network connections
• Employs GCMP-256 bit encryption
• Uses Simultaneous Authentication of Equals for secure handshake

Securing a Network

• Disable SSID broadcasting
• Enable MAC address filtering
• Enable a firewall for traffic control
• Use at least WPA2-PSK (or WPA2-EAP for organizations and businesses) for encryption and authentication
• Secure passwords
• Change all default settings

Wired Equivalent Privacy (WEP)

• Uses a 64 or 128 bit key in hexadecimal for encryption
• Relies on a static key for security
• Designed to prevent "man in the middle" attacks

Wi-Fi Protected Access (WPA)

• Replaces WEP and utilizes the Temporal Key Integrity Protocol (TKIP)
• TKIP dynamically changes keys used by systems to enhance security

Wi-Fi Protected Access 2 (WPA2)

• An upgrade to WPA, offering both encryption and authentication
• Includes two modes:
  • Pre-shared key (personal) - WPA2-PSK
    • Utilizes a shared passcode for access, common in home environments
  • Enterprise mode - WPA2-EAP
    • Suitable for organizations and businesses
• Uses Counter Mode Cipher Block Chaining Message Authentication Code Protocol (CCMP)
  • Replaces TKIP
  • Based on the Advanced Encryption Standard (AES) algorithm
  • Provides message authenticity and integrity verification
  • Stronger and more reliable than TKIP

Wi-Fi Protected Access 3 (WPA3)

• An upgrade to WPA2
• Provides individualised data encryption
• Uses Wi-Fi Device Provisioning Protocol (DPP)
• Supports Near Field Communication (NFC) tags and QR codes for device network joining
• Utilizes GCMP-256 bit encryption
• Implements Simultaneous Authentication of Equals for enhanced security

Securing a Network

• Disable SSID broadcasting
• Enable MAC address filtering
• Enable a firewall for traffic control
• Utilize at least WPA2-PSK (or WPA2-EAP for organizations and businesses) for encryption and authentication
• Secure passwords
• Change all default settings

Encryption

• Converts information into ciphertext, scrambling it into a secret code
• Prevents information from being stolen or compromised
• Only decipherable using a unique digital key

Authentication

• Verifies the identity of users, processes or devices
• Ensures access to only authorized information

Secure Socket Layer (SSL)

• A protocol that encrypts and secures data transmitted over the internet
• Establishes a secure connection between a user's computer and a website or server, or between two servers.
• Provides an SSL digital certificate to verify a website
• Prevents hackers from stealing or viewing transferred information
• Operates at layer 6 (presentation) in the OSI Model

Secure Shell (SSH)

• A cryptography network protocol for encrypted data transfer over a network
• Uses a username/password authentication system

Transport Layer Security (TLS)

• Evolved from SSL
• Encrypts data sent over the internet for security
• Provides end-to-end security

This quiz explores the various Wi-Fi security protocols including WEP, WPA, and WPA2. Participants will learn about the key differences, encryption methods, and security improvements each protocol offers. Understanding these protocols is essential for ensuring secure wireless communications.