[Day 12] 2. WPA (Wi-Fi Protected Access)

WPA stands for Wi-Fi Protected Access, which is a security standard for wireless networks.

1. WPA v1 (WPA Version 1)

• Encryption Methods:

  • TKIP (Temporal Key Integrity Protocol) : Designed to enhance WEP by dynamically changing encryption keys for each data packet.
  • DES (Data Encryption Standard): A symmetric encryption algorithm using 32-bit keys.

• Security Strength:

  • DES provides encryption with around 2³² possible combinations (32-bit encryption).
  • A hacker would need to attempt 2³² different passwords to crack the encryption by brute force, but it's not considered highly secure by modern standards.

• Vulnerabilities:

  • Although WPA v1 improved security compared to WEP, it still had vulnerabilities, particularly due to weaknesses in TKIP and DES, making it susceptible to attacks over time.

2. WPA v2 (WPA Version 2)

• Encryption Methods:

  • 3DES (Triple DES): A stronger version of DES that applies the encryption process three times to the data.
    • The encryption is done in three stages: the data is encrypted, decrypted, and then re-encrypted using different keys at each step.
    • This multi-layered process makes it much harder to break, as an attacker would need to break three different encryption processes.
  • AES (Advanced Encryption Standard): A modern and robust encryption standard, using either 128-bit or 256-bit keys.

• Security Strength:

  • 3DES: While much stronger than DES, 3DES encrypts data in a more secure manner but is slower due to its repeated encryption. Applies DES 3 times.
  • AES: The most advanced encryption algorithm in WPA v2.
    • With 128-bit encryption, there are 2¹²⁸ possible combinations, making it virtually impossible to crack using brute force.
    • AES is recognized for its efficiency and high level of security, making it the standard for most modern Wi-Fi networks.

Key Points

• WPA v1 improved security with TKIP and DES, but it is now considered outdated and vulnerable.
• WPA v2 offers significantly better security using 3DES and AES, with AES being the most secure method currently in use.
• AES encryption (128 or 256 bits) provides an extraordinarily high level of security, with 2¹²⁸ possible decryption methods, making it extremely difficult to hack.