With all the recent vulnerabilities in WPA2 and so many low quality posts/articles in the internet about WPA2 security I am not being able to fully understand the risks of WPA2.

Is WPA2 Personal secure provided that strong passwords (63 bytes random) are used? Shall I use TKIP, AES or TKIP+AES in the configuration?

If not, Is WPA2 Enterprise against a Radius server secure? (Again, strong passwords involved).

  • No, not really, not even with the right settings WPA2 is strong enough today. Depends on what you want to secure but implementing a RADIUS Server would be your best shot.
    – Azteca
    Nov 3 '19 at 9:32
  • Disable weak/legacy encryption: WEP, WPA, and WPA2-PSK-TKIP. Especially, WPA2-PSK-TKIP is oftentimes enabled by default. TKIP (Temporal Key Integrity Protocol) uses insecure RC4 for encryption! It was an interim solution to replace WEP and was deprecated more than five years ago.
  • Enable strong encryption only: WPA2-PSK-CCMP. CCMP (Counter-Mode/CBC-MAC Protocol) is sometimes called “WPA2-Personal” or “WPA2-AES”.

Derived from https://infosec-handbook.eu/blog/hns1-hello-world/

So, WPA2-AES is secure (do not use TKIP). WPA2 Enterprise uses different technologies/protocols. In general, it is also secure.

  • Yes, this would be the Optimal settings for WPA2, but still it's not "secure" as of today.
    – Azteca
    Nov 3 '19 at 9:33
  • @Azteca That is what I was suspecting. Can you provide any reference?
    – M.E.
    Nov 3 '19 at 9:45
  • @M.E.Refference for what? being the optimal setting or net being secure enough today?
    – Azteca
    Nov 3 '19 at 19:24

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.