1. Wi-Fi Protected Access 2 (WPA2) Eng. MshariAlabdulkarim

3. WPA2 Process.

4. WPA2 Authentication.

5. WPA2 Encryption.

6. WPA2 Pros and Cons.

8. It uses the RC4 encryption protocol to secure the data.

9. It uses CRC-32 checksum to verify integrity of the data.Plain Text Message CRC Key stream = RC4(v, k) Cipher text V Transmitted Data

11. It uses the RC4 encryption protocol to secure the data.

12. It uses MIC (Message Integrity Code) and frame counter to verify integrity of the data.

13. It uses EAP(Extended Authentication Protocol) to authenticate the clients.

15. The primary enhancement over WPA is the use of the AES (Advanced Encryption Standard) algorithm.Personal

17. The Personal mode uses a PSK (Pre-Shared Key) and doesn't require a separate authentication of users.

19. Wi-Fi Protected Access 2 (WPA2)

21. Phase (2):Generate the master key.

22. Phase (3):Creating temporary keys in regular manner.

26. The security protocols for unicast traffic (CCMP, TKIP etc.) – the pairwise cipher suite.

34. The authentication in the WPA2 Personal mode does not require having an authentication server.

35. WPA2 Enterprise mode consists of the following components:

36. Supplicant (client).

37. Authenticator (access point).

39. One for service “only open to allow the successful authentications”.

40. One for authentication “open to allow any authentication frames”.Communications: Layer 2 EAPoL (EAP over LAN) RADIUS message RADIUS Client Access point

42. The 4-Way Handshake is initiated by the access point and it performs many tasks like:

43. Verify that the client knows about the PMK.

44. Generate a PTK.

45. Install encryption and integrity keys.

46. Encrypt transport of the GTK.

47. Make sure that the cipher suite the selection.

49. Wi-Fi Protected Access 2 (WPA2) Authentication process (Summary) Start Identity ? Identity Identity Accept Forwarding

51. The AES uses the Counter-Mode/CBC-MAC Protocol (CCMP).

53. Wi-Fi Protected Access 2 (WPA2) WPA2 Encryption Steps (2) Counter Mode Counter Counter + 1 Counter + (N-1) 128-bit 128-bit 128-bit AES encryption AES encryption AES encryption TK TK TK 128-bit 128-bit 128-bit P2 PN P1 128-bit 128-bit 128-bit 128-bit 128-bit 128-bit C2 CN C1 C1 C2 CN

54. Wi-Fi Protected Access 2 (WPA2) WPA2 Encryption Steps (3) Counter Mode Counter 128-bit AES encryption TK C1 C2 CN C0 128-bit MIC 128-bit 128-bit C0 C0

55. Wi-Fi Protected Access 2 (WPA2) WPA2 decryption Steps Counter Mode Counter Counter + 1 Counter + (N-1) 128-bit 128-bit 128-bit AES encryption AES encryption AES encryption TK TK TK 128-bit 128-bit 128-bit C1 C2 CN 128-bit 128-bit 128-bit 128-bit 128-bit 128-bit P1 P2 PN P1 P2 PN

56. Wi-Fi Protected Access 2 (WPA2) WPA2 decryption Steps (2) Counter Mode Counter 128-bit AES encryption TK 128-bit C0 128-bit 128-bit MIC MIC

57. Wi-Fi Protected Access 2 (WPA2) WPA2 decryption Steps (3) CBC-MAC IV 128-bit 128-bit 128-bit TK AES encryption TK AES encryption TK AES encryption P1 P2 PN 128-bit 128-bit 128-bit 128-bit MIC is the first 64-bit MIC

59. Man-in-the-middle.

60. Authentication forging.

61. Replay.

62. Key collision.

63. Weak keys.

64. Packet forging.

66. Allow the client to reconnect to the access points which he has recently been connected to without needing to re-authenticate because of the PMK caching feature.

68. It supports strong encryption and authentication for both infrastructure and an ad-hoc network; in contrast WPA just supports the infrastructure networks.

70. RF jamming.

71. Data flooding.

72. Access points failure.

74. It is vulnerable for the DoS attack.

76. Good planning for the Wi-Fi coverage will improve the availability and reduce the risk of RF jamming attacks.