Siemens IEEE802.11 manual Shortcomings of plain WEP security

Shortcomings of plain WEP security

νWEP unsecure at any key length

–IV space too small, lack of IV replay protection

–known plaintext attacks

νNo user authentication

–Only NICs are authenticated

νNo mutual authentication

–Only station is authenticated against access point

νMissing key management protocol

–No standardized way to change keys on the fly

–Difficult to manage per-user keys for larger groups

νWEP is no mean to provide security for WLAN access,

–… but might be sufficient for casual uses.

WLAN-IEEE802.11 Tutorial (Maximilian Riegel), 021018-wlan-tutorial.ppt Page 60 © Siemens, 2002