WPA Information Element介绍

迷南。 2022-02-03 03:31 254阅读 0赞

The Wi-Fi/802.11 standard introduced two new Information elements to cater to the new WPA/WPA2 encryption scheme. They are the WPA (Wireless Protected Access) and RSN (Robust Security Network) Information Elements.

为了适应新的WPA/WPA2加密体系， WiFi/802.11 标准引入了两种新的信息元素。它们是WPA（无线接入保护）和RSN（强健安全网络）信息要素。

Any Station containing a WPA/RSN information element in its Association request would need to perform an 802.11i/802.1X security handshake.

任何Station（站点）的Association request（关联请求）中包含 WPA/RSN 信息元素都需要执行 802.11i/802.1x安全握手。

The WPA Information Element is shown below

WPA信息元素如下图所示：

![20190508174556355.jpg][] WPA Information Element

The WPA Element ID is set to 0x221. The WPA Element ID is same as the vendor specific element ID. Hence, whenever a vendor specific Element ID is received – the OUI needs to be checked by the Station/AP to see if the Information Element is WPA. If it is not WPA – AP/Station can choose to ignore parsing the Information Element

WPA的 元素ID 是0x221，和厂商的元素ID相同。因此当Station/AP收到厂商的元素ID后要检查OUI值看该元素是不是WPA。如果不是WPA，AP/Station 可以选择忽略解析这个信息元素。

The WPA OUI (Organizationally Unique Identifier) is set to 00-50-f2

WPA的OUI（组织唯一标识符）是00-50-f2.

The Type or Version of WPA is 1

WPA的类型或者版本是1

The Multicast cipher suite and Type (together termed as Multicast/Group Cipher suite selector) indicates the multicast cipher that is supported.

The Unicast Cipher count – indicates the number of unicast cipher suites present

The Unicast Cipher List – is variable based on the number of Unicast cipher count value.

The tabular column indicates some of the different cipher lists that are supported

表格中的列 表明支持的一些不同的加密列表

<table> 
 <tbody> 
  <tr> 
   <td>OUI</td> 
   <td>Suite Type</td> 
   <td>Meaning</td> 
  </tr> 
  <tr> 
   <td>00-50-f2</td> 
   <td>0</td> 
   <td>Use Group Cipher Suite</td> 
  </tr> 
  <tr> 
   <td>00-50-f2</td> 
   <td>1</td> 
   <td>WEP-40</td> 
  </tr> 
  <tr> 
   <td>00-50-f2</td> 
   <td>2</td> 
   <td>TKIP</td> 
  </tr> 
  <tr> 
   <td>00-50-f2</td> 
   <td>3</td> 
   <td>Reserved</td> 
  </tr> 
  <tr> 
   <td>00-50-f2</td> 
   <td>4</td> 
   <td>Reserved</td> 
  </tr> 
  <tr> 
   <td>00-50-f2</td> 
   <td>5</td> 
   <td>WEP-104</td> 
  </tr> 
 </tbody> 
</table>

TKIP is the Default Cipher suite in WPA

WPA中的默认密码套件是TKIP。

NOTE: WEP-40 and WEP-104 can only be used as group cipher suites in the Transition Station network (TSN).

AKM Count – the Authentication Key Management count provides the number of Authentication key management suites that are supported.

AKM List – The number of different authentication mechanisms that is supported. The tabular column indicates some of the cipher suite and Type combination

<table> 
 <tbody> 
  <tr> 
   <td>OUI</td> 
   <td>Suite Type</td> 
   <td>Meaning</td> 
  </tr> 
  <tr> 
   <td>00-50-f2</td> 
   <td>0</td> 
   <td>Reserved</td> 
  </tr> 
  <tr> 
   <td>00-50-f2</td> 
   <td>1</td> 
   <td>802.1X</td> 
  </tr> 
  <tr> 
   <td>00-50-f2</td> 
   <td>2</td> 
   <td>PSK</td> 
  </tr> 
 </tbody> 
</table>

The Packet capture below indicates the details of a PSK AKM suite selected and TKIP as Multicast/Unicast Cipher suite

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTQ0MzYyNDM_size_16_color_FFFFFF_t_70][] WPA capture

原文：[LINK][]

[20190508174556355.jpg]: /images/20220203/f2e9eeab4d8649658fa52388ee916d92.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3UwMTQ0MzYyNDM_size_16_color_FFFFFF_t_70]: /images/20220203/51fd8fd4f6c14f7c9c88cc5988325366.png
[LINK]: http://www.hitchhikersguidetolearning.com/2017/09/17/wpa-information-element/