The Wi-Fi Alliance announced Monday that it will begin to popularize the WPA3 encryption protocol by the end of 2018.
The Wi-Fi Alliance is a business consortium responsible for Wi-Fi certification and trademark licensing and is headquartered in Austin, Texas. Its membership covers manufacturers, standardization bodies, regulators, service providers and carriers, and Apple, Samsung , Intel is all his member.
Lei Feng recently summarized foreign media information summarizes the WPA3 protocol relative WPA2 protocol security enhancements, as follows:
1, to prevent hackers brute force crack password.
For the weak password this matter, although all the hackers give us many lessons of blood and tears, but there will still be 'lazy' use.
For hacker hit the database attack, Wi-Fi Alliance said, WPA3 can be repeated attempts to crack the number of direct lock.
In other words, the encryption protocol automatically blocks the login behavior when it is found that hackers have repeatedly tried to log in to your device using passwords such as 12345 or ABCDEF.
So, remember the password of the children's shoes, when entering the era of WPA3, do not try to pass a few more times will be on the password, the number of times even if the password is entered correctly, will be considered a direct hack attack number!
2, you can use mobile phones, tablets and other smart devices more convenient to set.
In other words, users can use their cell phone or tablet to easily set up screenless IoT devices such as smart speakers.
For example, you buy a new sound without a screen, you want to connect to the Internet, it will be more troublesome now can easily support remote configuration, there will be in these options, such as which even WIFI hotspot, the number of passwords can be configured In the era of WPA2, these logic needs to be developed separately by developers, and now the WPA3 protocol has made this part well.
3, personalized data encryption.
The third feature is 'Personalized Data Encryption', a feature that encrypts the connection between each device and a router or access point.
WPA3 can assign different encryption keys to different devices, so it can effectively reduce the risk of attackers getting packets by capturing packets and analyzing offline, which is not available in WPA2.
4, encryption standards require higher.
The fourth feature is an improved encryption standard that the Wi-Fi Alliance describes as a 192-bit security suite that is compatible with the National Security Council CNSA suite and will further protect it even higher Security requirements for wireless networks, such as for government, defense and industrial networks.
Compared with the previous 128-bit encryption algorithm, WPA3 increases the difficulty of encryption at the password level, which is a change of the underlying cryptography technology. It is more difficult for a hacker to crack the password in the future.
Of course, it will not be as simple as knowing whether the WPA3 protocol with great security improvements can be taken care of.
The first is compatibility issues, the problem is simple, it is the compatibility of old equipment and new equipment , Although part of the user's equipment can be updated according to the arrangement of the manufacturer to support the WPA3 security protocol.
Although some IOT devices support WPA3, because the connected router is WPA2, security personnel still need to continuously protect WPA2 from problems. Therefore, security problems related to WPA2 still exist for a long time.
Followed by security issues, Although WPA3 can effectively counter the IoT weak password being violently attacked, it can play a protective role in using plaintext transmission equipment. However, the security of the firmware itself still needs to be rigorously checked by R & D personnel.
Wi-Fi Alliance said that the popularity of WPA3 requires a process, at least 2-3 years, during this time, the impact of 'KARACK' still have to seriously deal with.
