WPA3 Security Update :

Wi-Fi security is finally getting an upgrade after 14 years.

The Wi-Fi Alliance just launched WPA3, a Wi-Fi security standard that will replace WPA2. We assume that WPA3 will be everywhere in a short time and make it harder for people to hack your Wi-Fi.

Why need more secured Wi-Fi?

With WPA2 in play, hackers could identify passwords as they’re transmitted through a jumble of data in web traffic, by knowing the specifications of routers and how they beamed data between devices and servers. These are commonly known as dictionary attacks.

First up is its vulnerability to offline brute-force password-guessing attacks. With WPA2 an attacker is able to capture some of your Wi-Fi data and take it away to repeatedly guess its password offline. A serious vulnerability dubbed “KRACK” – short for Key Reinstallation Attack – was found in WPA2 last October, leading to fears that it could be exploited by hackers as a means of reading and stealing data and passwords. It worked by manipulating part of the four-way ‘handshake’ that WPA2 uses to ensure the correct password is used and made lots of people realize that their wireless networks were not as secure as they believed them to be.

What smart level of security will WPA3 use?

WPA2 uses 64-bit or 128-bit encryption, but WPA3 will improve this by having a 192-bit security suite – a technology it is aiming at governments, industry, and defense. According to the Wi-Fi Alliance, this will bring “the latest in cryptographic strength”.

The Wi-Fi Alliance has also suggested measures you can take to beef up your own security: enable WPA2 now and then ensure WPA3 is enabled when it becomes available; change the default settings of your equipment; install the latest security updates; and only buy Wi-Fi devices that have the Wi-Fi Certified logo.

WPA3 offers improved protection against brute force attacks, making it harder for hackers to decrypt your WiFi password, even if you choose the less complex password.

WPA3 reinforces the privacy for open network users through individual data encryption, a function that encrypts wireless traffic between your device and the Wi-Fi hotspot to mitigate the risk of Man-in-the-Middle (MitM) attacks. To avoid such passive attacks, WPA3 could add support for timely wireless encryption.

WPA-3 Standards has two modes

WPA3-personal is more resilient, password-based authentication even when users choose passwords that fall short of typical complexity recommendations. WPA3 leverages Simultaneous Authentication of Equals (SAE), a secure key establishment protocol between devices, to provide stronger protections for users against password guessing attempts by third parties.

WPA-Enterprise offers the equivalent of 192-bit cryptographic strength, providing additional protections for networks transmitting sensitive data, such as government or finance. The 192-bit security suite ensures a consistent combination of cryptographic tools is deployed across WPA3 networks.

 

Post from Weborion Software Solutions