Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Wireless Security » Questions about WPA2 and WPA
Search Topic:
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Network Help »
AuthorAll Replies

Jason Cohen

join:2004-11-06
Waltham, MA

reply to jbibe
Re: Questions about WPA2 and WPA

said by jbibe See Profile :

said by Jason Cohen See Profile :

1) Is WPA/WPA2-Enterprise inherently more secure than WPA/WPA2-PSK?
In most cases the answer is yes, the Enterprise mode is more secure than the PSK mode. Most access points use a single PSK when operating in the WPA-PSK or WPA2-PSK modes. Although the specification (802.11i) allows the use of multiple PSKs, most access points do not provide this feature. This means that cases where PSK is in use there is a single PMK, since the PMK=PSK.

In the Enterprise mode, every station has a different PMK. During authentication, the RADIUS server produces a new Master Key (MK). The RADIUS server transfers the MK to the station. The RADIUS server and station then derive the PMK. Beyond producing a new PMK with during the initial connection, many access points require re-authentication at regular intervals, perhaps every 30 minutes. Each re-authentication produces a new PMK.

What security risk is entailed by having a single PMK? I would think that the biggest risk of PSK mode is that any client on the wireless network can decrypt the traffic from any other client.
Forums » Up and Running » Security » Wireless SecurityNetwork Help »


Saturday, 28-Nov 08:42:26 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [121] Time Warner Cable Fires Broadside At Broadcasters
· [112] New AT&T Ad Campaign Hits Back At Verizon
· [96] Apple Joins AT&T Verizon Snark Fest
· [87] New Bill Takes Aim At Higher Verizon ETFs
· [71] TiVo Sees Record Customer Losses
· [69] In-Flight Internet Headed For Bumpy Landing?
· [68] Verizon CEO: Hulu Will Be Dead Soon
· [62] Thanksgiving Open Thread
· [51] Weekend Open Thread
· [40] EFF Wages War On Fine Print
Most people now reading
· Windows 7 boot manager editing questions [Microsoft Help]
· 5 hour energy for diabetic [General Questions]
· [Newsgroups] Newzleech down? [Filesharing Software]
· Is Gear Score now the new requirement to get pug invite? [World of Warcraft]
· What to use while demonoid is down? [Filesharing Software]
· Use MagicJack on Linux, PPC Mac [MagicJack]
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]
· Blade servers [TekSavvy]
· Nvidia Forceware for Windows XP\2000\03 195.62 [Software]
· Can't Find Print Management in Win7 [Microsoft Help]