03.11.2012 Views

Wireless LAN Security with 802.1x, EAP-TLS, and PEAP - Black Hat

Wireless LAN Security with 802.1x, EAP-TLS, and PEAP - Black Hat

Wireless LAN Security with 802.1x, EAP-TLS, and PEAP - Black Hat

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Encryption keys<br />

Client <strong>and</strong> RADIUS server generate peruser<br />

session WEP keys<br />

Never sent over the air<br />

RADIUS server sends key to AP (encrypted<br />

<strong>with</strong> RADIUS shared secret)<br />

Access point has a global WEP key<br />

Used during AP authentication to client<br />

Sent in <strong>EAP</strong>OW-key message<br />

Encrypted <strong>with</strong> session key<br />

Session keys regenerated when…<br />

Key time exceeded (60 minute default)<br />

Client roams to new AP

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!