Slashdot Mirror


Wi-Fi Alliance Launches WPA3 Security Standard (securityweek.com)

wiredmikey writes: The Wi-Fi Alliance, the organization responsible for maintaining Wi-Fi technology, announced the launch of the WPA3 security standard. The latest version of the Wi-Fi Protected Access (WPA) protocol brings significant improvements in terms of authentication and data protection.

WPA3 has two modes of operation: Personal and Enterprise. WPA3-Personal's key features include enhanced protection against offline dictionary attacks and password guessing attempts. WPA3-Enterprise provides 192-bit encryption for extra security, improved network resiliency, and greater consistency when it comes to the deployment of cryptographic tools.

4 of 97 comments (clear)

  1. Upgrading existing WPA2 WiFI APs by Anonymous Coward · · Score: 2, Interesting

    Is this something a router/access point running OpenWRT could upgrade to? Or would WPA3 require a driver/firmware upgrade as well?

  2. Re:Some info by Anonymous Coward · · Score: 2, Interesting

    its a poorly kept secret that wiredmikey is banging msmash
    your submission had no chance

  3. Will enterprise still be a clusterfuck to setup? by Anonymous Coward · · Score: 2, Interesting

    I understand that WPA Enterprise is built off existing technologies but holy fuck setting up it's infrastructure should not be like pulling teeth.

    If someone could figure out a way to create an easy to implement, reasonable cost WPA enterprise-as-a-service they would literally print fucking money. Bonus if you could tie it in to an SSO service.

  4. Most important feature by Anonymous Coward · · Score: 5, Interesting

    Knowledge of the pre-shared key in personal mode no longer give an attacker the opportunity to decrypt everything on the network. In WPA and WPA2, an attacker who knows the PSK (for example that of a public hotspot) can passively record the handshake frames and recover the keys used by other clients. WPA3 prevents this, so even when you use a public hotspot, the connections between your computer and the access point are secure against passive attacks. (An attacker can still perform a MITM attack because there is no way to authenticate a public hotspot with a non-secret PSK.)