WPA3 uses AES-128 for message encryption in Personal and 192 bits in Enterprise. Thus the secret of communication is kept using this symmetric encryption protocol. As I have understood, security problems in wireless networks usually tend to rise not due to the encryption algorithm used (because using AES 128 would mean trying 2^128 combinations and given the current computing technologies this process is computationally untractable in human feasible time), but due to the password used (simple passwords would help reduce the space of possible passwords in a dictionary attack, hence the recommendations of using more elaborated pws) or due to the key sharing process (the handshake). Is my understanding of this correct?
To be more precise, WPA3 uses AES-CCMP because AES alone only provides data encryption, it does not guarantee integrity or authentication, but CCMP provides both integrity because it makes sure that the original message was not tampered with, thus proving authenticity. Is this information pointing in the right direction? If this is correct, could someone please elaborate a little bit more on this?