New standard of Wi-Fi security 'WPA 3' has appeared, it also copes with the vulnerability of WPA 2 and makes hacking difficult



The Wi - Fi Alliance , which develops Wi - Fi standards, announced the new standard of Wi - Fi security " WPA 3 " on June 25, 2018 in the US time. WPA 2 widely used as of 2018 had problems such as vulnerability called " KRACK " that can intercept Wi-Fi traffic without a password, but in WPA 3 the security has improved significantly, and these It means that all problems can be solved.

Wi-Fi Alliance® introduces Wi-Fi CERTIFIED WPA 3 ™ security | Wi-Fi Alliance
https://www.wi-fi.org/news-events/newsroom/wi-fi-alliance-introduces-wi-fi-certified-wpa3-security

WPA 3 Standard Officially Launches With New Wi-Fi Security Features
https://thehackernews.com/2018/06/wpa3-wifi-security-standard.html

With WPA 2, Wi-Fi compatible terminals such as PCs and smartphones can join the network using an authentication procedure called 4-way handshake. However, by intentionally manipulating communication in the middle of 4-way handshake, the existence of the vulnerability "KRACK" which can break through the certification became clear in October 2017, and the fundamental solution There was no state that was not there.

Therefore, in WPA 3, in order to prevent the problem of KRACK, a procedure called Simultaneous Authentication of Equals (SAE) is added before doing 4-way handshake, it is possible to prevent attack like KRACK. In addition, WPA 3-Enterprise for enterprises has raised the encryption strength from 128 bit to 192 bit, and achieves higher security than WPA 2.

In addition to this, it also has encryption of communication traffic and countermeasures against brute force attack , so it is possible for WPA 3 to prevent eavesdropping by communication by third parties and to prevent illegal entry into Wi-Fi network It is becoming.



The Wi - Fi Alliance has also announced a new feature called "Wi - Fi Easy Connect" as WPA 3 announces. This means that you can connect a Wi-Fi enabled device without a display to a Wi-Fi router with a simple operation, so that it can be an alternative to WPS , which has been considered vulnerable to brute force attacks so far It is expected.

According to the Wi-Fi Alliance, it is said that the official introduction of WPA 3 will be in the latter half of 2018, and in the latter half of 2019 the implementation of WPA 3 will be mandatory for all Wi-Fi routers.

in Software,   Security, Posted by darkhorse_log