I don't quite understand how KRACK is considered a protocol weakness rather than an implementation error.
From reading about KRACK, I found following facts:
- There are more vulnerable implementation of WPA.
- KRACK can be patch in a backward compatible manner.
If the there exist an implementation that is not vulnerable to KRACK, but is compatible with current WPA2 protocol, shouldn't KRACK be considered an implementation error?