Wpa2 (Ccmp) Security - Motorola CB3000 User Manual

D-6 CB3000 Client Bridge User's Guide
D.3 WPA2 (CCMP) Security
WPA2 is a newer 802.11i standard that provides even stronger wireless security than Wi-Fi Protected Access
(WPA) and WEP. CCMP is the security standard used by the Advanced Encryption Standard (AES). AES serves
the same function TKIP does for WPA-TKIP. CCMP (Counter Mode with Cipher Block Chaining Message
Authentication Code Protocol) is the preferred encryption protocol in the 802.11i standard. CCMP computes
a Message Integrity Check (MIC) using the proven Cipher Block Message Authentication Code (CBC-MAC)
technique. Changing just one bit in a message produces a totally different result.
WPA2-CCMP is based on the concept of a Robust Security Network (RSN), which defines a hierarchy of keys
with a limited lifetime (similar to TKIP). Like TKIP, the keys the administrator provides are used to derive other
keys. Messages are encrypted using a 128-bit secret key and a 128-bit block of data. For detailed steps on
configuring WPA2 for the CB3000 Client Bridge, see Configuring WPA2 (CCMP) Security Settings on page 3-
18.