Reference Manual for the NETGEAR 54 Mbps Wireless USB Print Server with 4-Port Switch

Temporal Key Integrity Protocol (TKIP)

WPA uses TKIP to provide important data encryption enhancements including a per-packet key mixing function, a message integrity check (MIC) named Michael, an extended initialization vector (IV) with sequencing rules, and a re-keying mechanism. TKIP also provides for the following:

The verification of the security configuration after the encryption keys are determined.

The synchronized changing of the unicast encryption key for each frame.

The determination of a unique starting unicast encryption key for each preshared key authentication.

Michael

With 802.11 and WEP, data integrity is provided by a 32-bit integrity check value (ICV) that is appended to the 802.11 payload and encrypted with WEP. Although the ICV is encrypted, you can use cryptanalysis to change bits in the encrypted payload and update the encrypted ICV without being detected by the receiver.

With WPA, a method known as Michael specifies a new algorithm that calculates an 8-byte message integrity code (MIC) using the calculation facilities available on existing wireless devices. The MIC is placed between the data portion of the IEEE 802.11 frame and the 4-byte ICV. The MIC field is encrypted together with the frame data and the ICV.

Michael also provides replay protection. A new frame counter in the IEEE 802.11 frame is used to prevent replay attacks.

AES Support

One of the encryption methods supported by WPA beside TKIP is the advanced encryption standard (AES), although AES support is required for WPA2 for Wi-Fi certification. This is viewed as the optimal choice for security conscience organizations, but AES requires a fundamental redesign of the NIC’s hardware in both the station and the access point. TKIP was a pragmatic compromise that allowed organizations to deploy better security while AES capable equipment is being designed, manufactured, and incrementally deployed.

Wireless Networking Basics

B-15

202-10083-01

Page 55
Image 55
NETGEAR WGPS606 manual Temporal Key Integrity Protocol Tkip

WGPS606 specifications

The NETGEAR WGT624SC, GS608, GS605, XE103, and WGPS606 are key components in the networking ecosystem designed for various connectivity needs, offering reliable performance and innovative features.

The NETGEAR WGT624SC is a wireless router that operates on both the 2.4 GHz and 5 GHz bands. This dual-band capability allows for increased flexibility and speed, making it suitable for households with multiple devices. It supports 802.11g wireless technology, providing robust performance and ensuring a range that covers average-sized homes. With features like WPA2 security, users can enjoy safe wireless connections. The router also includes four LAN ports for wired connections, ensuring that devices like gaming consoles and desktop computers can connect seamlessly.

Moving to the NETGEAR GS608 and GS605, these unmanaged switches are designed for small to medium-sized networks. The GS608 is an 8-port Gigabit Ethernet switch, while the GS605 has five ports. Both models offer plug-and-play functionality, making them ideal for users who require easy setup without extensive configuration. The switches support auto-negotiation for optimal speed, as well as energy-efficient Ethernet technology to reduce power consumption during low traffic periods.

The NETGEAR XE103 is a unique solution in the realm of powerline networking. Utilizing existing electrical wiring, this powerline adapter allows users to extend their network without the need for long cable runs. It supports data rates suitable for streaming and online gaming, providing a reliable alternative for reaching difficult areas of a home where Wi-Fi signals may be weak.

Finally, the NETGEAR WGPS606 is a wireless print server that facilitates the connection of multiple printers to a wireless network. Ideal for small office setups or home environments, it supports various printer types and enables remote printing from any connected device.

Overall, these NETGEAR products exemplify a commitment to providing varied networking solutions that cater to different user requirements while maintaining high-quality performance and reliability.