An analysis of WLAN security mechanisms of wired equivalent privacy （WEP） and Wi-Fi protected access （WPA） discovers that the current literature is not totally creditable in its judgment on the security value of W...An analysis of WLAN security mechanisms of wired equivalent privacy （WEP） and Wi-Fi protected access （WPA） discovers that the current literature is not totally creditable in its judgment on the security value of WEP and WPA. Based on the respective performances of WEP and WPA under certain typical attacks, this paper substantiates the judgment that WEP has quite a few vulnerabilities concerning confidentiality and integrity, but at the same time challenges the judgment on WPA with that WPA is robust enough to confront potential typical attacks and is not so unreliable as the current literature believes, although it has some vulnerabilities in its message integrity code （MIC）.展开更多
Temporal key integrity protocol （TKIP） is a sub-protocol of IEEE 802.11i. TKIP remedies some security flaws in wired equivalent privacy （WEP） protocol. TKIP adds four new algorithms to WEP： a message integrity co...Temporal key integrity protocol （TKIP） is a sub-protocol of IEEE 802.11i. TKIP remedies some security flaws in wired equivalent privacy （WEP） protocol. TKIP adds four new algorithms to WEP： a message integrity code （MIC） called Michael, an initialization vector （IV） sequencing discipline, a key mixing function and a reeying mechanism. The key mixing function, also called temporal key hash, de-correlates the IVs from weak keys. Some cryptographic properties of the substitution box （S-box） used in the key mixing function are investigated in this paper, such as regularity, avalanche effect, differ uniform and linear structure. Moen et al pointed out that there existed a temporal key recovery attack in TKIP key mixing function. In this paper a method is proposed to defend against the attack, and the resulting effect on performance is discussed.展开更多
文摘An analysis of WLAN security mechanisms of wired equivalent privacy （WEP） and Wi-Fi protected access （WPA） discovers that the current literature is not totally creditable in its judgment on the security value of WEP and WPA. Based on the respective performances of WEP and WPA under certain typical attacks, this paper substantiates the judgment that WEP has quite a few vulnerabilities concerning confidentiality and integrity, but at the same time challenges the judgment on WPA with that WPA is robust enough to confront potential typical attacks and is not so unreliable as the current literature believes, although it has some vulnerabilities in its message integrity code （MIC）.
基金the National Laboratory for Modern Communications(No.51436050304JW0317)the National Natural Science Foundation of China(No.60573030)
文摘Temporal key integrity protocol （TKIP） is a sub-protocol of IEEE 802.11i. TKIP remedies some security flaws in wired equivalent privacy （WEP） protocol. TKIP adds four new algorithms to WEP： a message integrity code （MIC） called Michael, an initialization vector （IV） sequencing discipline, a key mixing function and a reeying mechanism. The key mixing function, also called temporal key hash, de-correlates the IVs from weak keys. Some cryptographic properties of the substitution box （S-box） used in the key mixing function are investigated in this paper, such as regularity, avalanche effect, differ uniform and linear structure. Moen et al pointed out that there existed a temporal key recovery attack in TKIP key mixing function. In this paper a method is proposed to defend against the attack, and the resulting effect on performance is discussed.
