802.11i Security Upgrade IEEE could ratify standard today Members of the Institute for Electrical and Electronics Engineers (IEEE) standards board will be meeting today to possibly approve the 802.11i standard. The upgrade adds the AES (Advanced Encryption Standard) security protocol to the various 802.11 Wi-Fi flavors. AES supports 128-bit, 192-bit and 256-bit keys.
The path to 802.11i has been a long one, the industry pushing for WPA (Wi-Fi protected access) as an interim solution to the feeble security offered by WEP. WPA was a subset of 802.11i, and repaired many of the problems of WEP while the final standard was cooking in the oven.
With the security offered by AES, many companies who were slow to adopt Wi-Fi may now have a change of heart (likewise with paranoid residential shut-ins). The National Institute of Standards and Technology has designated AES as the security standard for wireless networks that carry government information.
Will users need to upgrade? While many outlets have reported otherwise, the majority of Wi-Fi chips shipped since roughly the middle of 2002 should be powerful enough to handle the new specification, and will simply need firmware upgrades from their respective vendors.
Many vendors like Broadcom and Atheros have essentially already integrated AES functionality, and are simply waiting for the green light. Intel says they're ready to offer the new security standard in their Centrino line of hardware.
A significant amount of older hardware will likely need to be replaced, however. Once the IEEE ratifies the standard, the group is expected to begin certifying products in September.
|
 Reviews:
·Verizon FiOS
| Security good This is good that the IEEE is working to get things accomplished at a good pace. But once its ratified I wonder how long it will take for the vendors to implement. -- Dopeler effect: The tendency of stupid ideas to seem smarter when they come at you rapidly. | |
|  |  | | Re: Security good Yes! hopefully vendors will implement this within a month or two... | |
|  |  BigARRYou Can Call Me AlPremium join:2004-01-16 MI, USA | said by Lumberjack: This is good that the IEEE is working to get things accomplished at a good pace. But once its ratified I wonder how long it will take for the vendors to implement.
And...when they do will it require new hardware or just a firmware upgrade? | |
|  |  |  | | Re: Security good The majority of chips shipped by 2002 should have enough processing power to be able to handle it with just a firmware upgrade. | |
|
 |  DSLrgmPremium,MVM join:2002-08-22 Oak Park, MI | I worked on the standard.
There are not a lot of differences between WPA and 802.11i.
Any hardware that works with WPA will work with 802.11i.
The spec has been stable for almost a year. Changes were cleaning up the text.
A lot of vendors should have code out quickly, as will MS (for XP and Win2000). | |
|  |  |  iffy5 join:2004-02-07 Columbus, OH | Re: 802.11i times WPA was never supported under W2K, without third party software. Hopefully this will change with 802.11i, but I wouldn't count on it. | |
|  |  |  |  wavguy2003370's ForeverPremium join:2004-03-18 Saint Charles, IL | Re: 802.11i times Not completely true. Microsoft released WPA Pre-Shared key support for W2K last February. | |
|
 |  | | I've been using WPA-PSK with AES encryption for over a year with various hardware that all talk to each other:
Linksys WAP54G Linksys WRT54G Dell Truemobile 1450 D-Link A/B/G PCMCIA card D-Link DWL-G120 (USB) Linksys WPC54GS
Everything above uses broadcom chips except for the D-Links, which use Atheros and Prism chips.
So, what is going to be different if I upgrade to 802.11i drivers? -- The visionary is always right. | |
|  |  |  | | Re: What will change? Arg. Too bad Linksys/Broadcomm don't publish Linux drivers. Or at least the API specs. | |
|
 |
 | |
|
|