Questions tagged [wpa3]
The wpa3 tag has no usage guidance.
18
questions
1
vote
0
answers
40
views
Can an evil AP prevent real connections by claiming SAE-PK is needed?
Is it possible to prevent SAE-PK-respecting WiFi clients from connecting to a real AP that doesn't use SAE-PK by planting an AP that broadcasts the "SAE-PK Passwords Used Exclusively" bit ...
- 2,831
1
vote
1
answer
109
views
Wifi Handshake Hijack
In a normal wifi network, after authentication we associate and then perform a handshake (WPA2: 4-way handshake, WPA3: dragonfly handshake) with the AP. How does a client now know that the frames ...
- 13
4
votes
2
answers
1k
views
How does a password prevent an evil twin if the password is publicly known?
This discussion of WPA3 OWE seems to imply that WiFi at Starbucks/the airport/whatever can be secured against an evil twin attack if they use WPA3-Personal instead of OWE. But it seems like that ...
- 323
1
vote
1
answer
518
views
sae_require_mfp=1 on hostapd and wpa3
I heard wpa3 is more secure with mfp.
I have a WPA AP using hostapd.
On /etc/hostapd.conf I have set it "forced"
ieee80211w=2
I see also this option about mfp
sae_require_mfp=1
Is ...
- 175
0
votes
1
answer
97
views
What is a logical threshold in terms of users or devices to migrate from WPA personal to WPA enterprise?
I have a question in particular about WPA's Enterprise versus Personal without discussing the specifics of WPA2/WPA3.
I've encountered quite a few situations where the Personal version of WPA2/WPA3 ...
- 6,765
3
votes
1
answer
689
views
Is WPA2-Enterprise a more secure protocol designed to protect WiFi communication compared to WPA3-Personal?
Perhaps an unconventional comparison. If we ignore device compatibility for a moment and compare security features of WPA3(-three)-Personal with WPA2(-two)-Enterprise. Which is most secure and why is ...
- 6,765
3
votes
1
answer
279
views
Are WPA3 connections with a shared key secure?
Related: Are WPA2 connections with a shared key secure?
Is a public WPA3 network secure against eavesdropper who knows the password?
The specific use case would be a public WiFi using WPA3, but with a ...
- 167
11
votes
1
answer
8k
views
Is WPA3 mixed mode less secure than pure WPA3?
I want to use WPA3 alone, but it seems that a lot of devices I have only support WPA2, so I have to enable WPA2 in one way or another. Currently, I have created two Wi-Fi networks on the same router: ...
- 227
3
votes
1
answer
526
views
What should we do in practice to mitigate vulnerabilities in WPA3?
WPA3 for Wi-Fi systems is generally acknowledged to be more secure than WPA2. For example, it introduces SAE with the Dragonfly handshake, in an attempt to close the door on the kind of brute force ...
- 518
0
votes
2
answers
4k
views
Will the new WPA3 protocol make it impossible to hack WIFI Password? [closed]
Like I asked in the thread title; Will the new WPA3 protocol make it impossible to hack a WIFI's password using tools like aircrack-ng?
- 635
3
votes
0
answers
359
views
WPA3-Personal and traffic privacy
It is well known that (malicious) endpoints in a Wi-Fi network password-protected by WPA2-Personal can sniff all clear traffic to/from any other endpoint, if they can also capture the 4-way handshake ...
3
votes
0
answers
217
views
How does WPA3 provide forward secrecy?
Someone told me that in WPA2, forward secrecy is achieved by generating ephemeral keys through the handshake’s nonces, but I couldn't find how WPA3 achieves it exactly (could not find info regarding ...
- 129
4
votes
1
answer
395
views
Help me understand SAE for WPA3
WiFi Alliance has announced that WPA3 will include SAE protocol, which is based on the Dragonfly handshake, leaving behind the 4-way handshake used in WPA2 that was vulnerable to KRACK.
From what I ...
- 129
5
votes
1
answer
909
views
In WPA3, how would one attack the AES-encrypted connection?
WPA3 uses AES-128 for message encryption in Personal and 192 bits in Enterprise. Thus the secret of communication is kept using this symmetric encryption protocol. As I have understood, security ...
- 129
11
votes
4
answers
3k
views
Does WPA3 OWE mean the return of Evil Twins?
When WPA3 has a reasonable level of market penetration, one of its key selling points is Opportunistic Wireless Encryption (OWE). In other words, a coffee shop can have a network without a password, ...
- 2,831
3
votes
2
answers
511
views
WiFi security in 2018
On my wireless network I have implemented WPA2 protocol with AES encryption. Last year there was several warnings that WPA2 is broken, hacked. Now there are announcements that WPA3 is comming in 2018. ...
- 167
10
votes
1
answer
3k
views
Why is WPA3 using 192-bit encryption?
Why is WPA3 going to be using 192-bit encryption and not 256-bit in the security suite?
- 491
11
votes
2
answers
2k
views
WPA3 announced. Really needed?
It seems Wi-Fi Alliance announced WPA3 for the end of 2018.
Anybody knows exactly what is new? features, security improvements, etc...
Is it because of Krack attack? I thought patching WPA2 is enough....
- 5,335