6

I have setup WiFi Direct connection between two Android devices by using Wi-Fi Protected Setup (WPS) "push button" for authentication.I also want to secure the connection itself by securing the data transmission between any two peers.

Edit: The WiFi Direct standard says to support WPA2 ciphering, but I'm not sure how it works (there is no way to configure the passphrase of it), and if it works at all.

One way of doing this could be to make some cipher key that the two peers shares and encrypt all the traffic coming out of specific port that I'm using.

Can you suggest some other method to make the connection secure?

Improve this question
1
3

There are several methods, which depend on where you want to use it for.

You should use WPA2 (with a pass-phrase), which is the standard for wireless network security. According to Wikipedia WPS generates the passphrase from the 8 digit PIN code and is vurnable to brute-force.

It is also possible to have security at application level. For various types of traffic, you can use an SSL layer. SSL is most commonly used in https.

Improve this answer
3

The simple answer is do not use WPS as it is vulnerable to the reaver attack.

This greatly reduces the amount of time needed to bruteforce your passpharse.

Improve this answer
1
  • The WPS method is the one with a "push button" and not passphrase, which make the vulnerability that found in 2011 irrelevant. But I'm not asking about the authentication security, I'm asking about the communication data that the peers send after the authentication already done.
    – Bush
    Jan 1 '13 at 14:54

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.