Someone told me that in WPA2, forward secrecy is achieved by generating ephemeral keys through the handshake’s nonces, but I couldn't find how WPA3 achieves it exactly (could not find info regarding nonces in WPA3). Could someone shed some light on this?

But then I read that WPA2 could not achieve perfect forward secrecy because of having a pre-shared key (PSK), since the ephemeral keys are derived from the PSK. So if an attacker knows the PSK, he could decrypt old messages if they had captured them. Is this correct?

On the other hand WPA3 is said to provide perfect forward secrecy. Is this because the key sharing process is done through the Dragonfly handshake, which is based on the Diffie Hellman algorithm and thus retrieving the private keys (the random numbers generated as negotiated) is computationally intractable?

  • 3
    The exact way WPA3 achieves this isn't public yet. Or at least, I couldn't find anything other than an announcement that the standard was stabilized. Most likely, we'll have to wait some time before it is published. As for your second two questions, I answered them on your previous question.
    – forest
    Dec 12, 2018 at 10:05
  • 1
    In case it helps generate an answer, the WPA3 spec was most-recently updated Feb-2024 and can be found on wi-fi.org (source link: wi-fi.org/wi-fi-download/35332)
    – wilson0x4d
    Apr 18 at 6:35


You must log in to answer this question.

Browse other questions tagged .