WPA plugs holes in WEP

New wireless security standard could drive hot spot, academic installations.

By Jim Geier, Network World
March 31, 2003 12:09 AM ET

Share/Email
Tweet This
Comment
Print

Page 3 of 3

When this occurs, the access point assumes that a hacker is trying to gain access to the network. The access point shuts off all connections for 1 minute to avoid the possible compromise of resources on the network. Thus, a continuous string of unauthorized data can keep the network from operating indefinitely, which means you should have a back-up process ready for critical applications.

Want to compare wireless products? Visit the IT Product Guides now.

Implementation considerations

WPA is primarily a solution for legacy equipment because you can install WPA via simple software upgrades to your Wi-Fi-certified access points. This enables effective security among clients having different radio cards, assuming the radio cards also implement WPA. Access points that implement WPA will support a mixed environment of client devices, ones implementing WPA and others that don't.

WPA will maintain forward compatibility with the 802.11i standard. The eventual 802.11i standard will include Advanced Encryption Standard (AES) as an option, which is stronger than RC4. But an issue is that AES will likely require the replacement of a legacy access point because of the need for higher performing processors. As a result, 802.11i will be targeted for new equipment.

Is WPA an interim step or a long-lasting solution?

WPA can provide excellent security. The demand for compliance from the Wi-Fi Alliance assures users of plug-and-play security that has been a real roadblock to wireless LAN proliferation.

Customers should implement WPA through upgrades to existing equipment and should insist on it in new equipment. Because of new hardware requirements of 802.11i, WPA will likely be a security solution that lasts until you move to the next generation of hardware.

Evolution of wireless LAN security
WEP goes the way of the dodo bird, WPA emerges as missing link to 802.11i

Name	Wired Equivalent Privacy	Wi-Fi Protected Access	802.11i or Wi-Fi Protected Access Version 2
Acronym	WEP	WPA	WPA2
A.K.A.	Won't Even Protect	Will Protect Alright	Will prove airtight
Features	Weak encryption keys based on RC4 algorithm (typically 40-bit keys). Static keys that make easy targets for hackers	Same underlying RC4-based encryption as WEP TKIP (temporal key integrity protocol) added so that keys are rotated and encryption is strengthened.	Strong AES encryption based on Rijndael algorithm (128, 192 or 256 bit key sizes). Adds two strong authentication features: wireless robust authentication protocol or WRAP; counter with cipher block chaining message authentication code protocol or CCMP.
Life span	1997-2003	2003-2004	2004-??????