I've read from Wikipedia that Wi-Fi direct uses WPS (Wifi Protected Setup), and I know that in Android (at least what I have which is 4.0.1 on Galaxy S3) uses the WPS method of the "push button" to authenticate a client. We know that in 2011 a researcher revealed a security flaw in WPS.
Does WiFi Direct device that uses the "push button" method of WPS also vulnerable to the security flaw? (Because in the push button there is no PIN code to try to achieve by brute force).
It also written that
The standard also includes WPA2 security and features to control access within corporate networks.
What does it mean exactly? If the authentication done by WPS so what WPA2 has to do?
Does the data transmitted between the two WiFi Direct devices is encrypted?
If it's encrypted, by what key? Can the user configure this key somehow? (I didn't find the way in my device).