Networking / Beginners

TKIP/WPA

TKIP is one of the components of the IEEE 802.11i standard that attempts to address some of the vulnerabilities discovered in the WEP protocol. TKIP is used for generating random values that can be used along with the encryption algorithm to produce better encryption relative to WEP. TKIP also addresses an important aspect of a cryptographic solution that was sorely missing in WEP-key management. Specifically, WEP was incapable of dynamic key management. Proper key management schemes make sure that the cryptographic keys are kept safe from unauthorized parties.

A guiding principle behind the development of TKIP was to provide a solution that would not be too much of a radical departure from the existing WEP deployments. TKIP was designed so that original equipment manufacturers (OEM) of networking hardware could easily apply the new changes and improvements via software or firmware updates, without requiring the numerous/existing WEP deployments to make major changes to their current infrastructure.

So the "marketing name" for TKIP is WPA, and TKIP/WPA is endorsed by the Wi-Fi Alliance, which comes in the form of a certification program. The Alliance guarantees interoperability and compliance in products that have passed its certification requirements.

Underneath TKIP is still the RC4 algorithm-albeit a new and improved implementation. Exploitable vulnerabilities have been discovered in TKIP/WPA solution.

Tip The version of WPA that is targeted and well suited for the home user or SOHO market is called WPA Personal, WPA Pre-shared Key (WPA-PSK). And the version targeted for the enterprise market is called WPA Enterprise.

The pre-shared key is a pass-phrase-a sequence of 8-63 ASCII-encoded characters.

[Previous] [Contents] [Next]

In this tutorial:

  1. Securing Wireless Networks
  2. Security Background
  3. Security Services
  4. Cryptographic Concepts and Terms
  5. Encryption and Decryption
  6. Keyspace
  7. Exclusive OR (XOR)
  8. Algorithm
  9. Asymmetric Encryption Algorithms
  10. Public-Private Key Cryptography
  11. Cipher
  12. Concealment Ciphers vs. Running Key Ciphers
  13. Stream Ciphers vs. Block Ciphers
  14. Cipher Examples
  15. Cipher Implementations
  16. Wi-Fi Protected Access
  17. TKIP/WPA
  18. Wi-Fi Protected Access 2 (WPA2)
  19. CCMP/AES
  20. Hash Functions
  21. EAP
  22. EAP Entities
  23. EAP Grammar
  24. EAP Types
  25. EAP-TTLS
  26. EAP-PSK
  27. EAP-SIM
  28. EAP-AKA
  29. IEEE 802.11i
  30. Four-Way Handshake
  31. IEEE 802.11i Considerations