RSN Information Element介绍

专业词汇参考： 中国通信标准化协会_通信词典

 

The RSN information element was brought out by the IEEE 802.11i Task Group. RSN stands for Robust Security Network and it made AES cipher mandatory with the use of Robust Security Network.

IEEE 802.11i引入了RSN信息元素。RSN表示强健安全网络，它使用健壮安全网络和强制AES加密。

 

The TKIP cipher can be used as Multicast/Broadcast cipher and so can WEP-40/WEP104, but if the authentication method is 802.1X then WEP-40/WEP-104/TKIP are not allowed as group cipher as well.

TKIP加密用作多播/广播加密，因此可以用WEP-40/WEP104；但是如果认证方式是802.1X，则WEP-40/WEP104/TKIP也不允许作为组加密方式。

 

TKIP as a pairwise cipher with WEP-40/WEP104 as Group Cipher is also not supported

TKIP 作为成对加密方式不支持WEP-40/WEP104作为组加密模式。

 

The RSN Information Element is provided below. The Size of the RSN IE is limited to a maximum of 255 bytes

RSN信息元素如下所示。RSN信息元素的大小最大为255字节。

RSN format

Fig Courtesy – 802.11 Standard

Element ID – 48

Length – provides the number of bytes in the RSN Information element

Version – RSN version number – set to 1

Group Cipher Suite – it contains the Organizational Unique Identifier and the type of encryption selected. Default OUI is 00-0F-AC

Pairwise Cipher suite count – indicates the number of pairwise cipher suites supported

Pairwise Cipher suite list – list of different pairwise cipher suites supported

AKM Count – number of Authentication Key Management Suites supported

AKM Suite list – list of Authentication Key Management Suites

RSN Capabilities – provides additional capabilities supported

PMKID Count – The PMKID Count is used in the re-association request frame/FT authentication sequence frames only. It defines the number of Pairwise Master Key Security Association Identifiers in the PMKID List

PMKID List – List of PMKIDs

Group Management Cipher suite – cipher suite selected to protect group addressed robust management frames

The below Table taken from the 802.11-2012TM Standard indicates the different Cipher suite selections available for
group/pairwise and group Management protection

下表取自802.11-2012TM标准，表明了对组/配对加密和组管理保护的一些不同的可用加密套件选项。

The AKM Cipher list is shown below taken from the 802.11-2012TM Standard

AKM（认证密钥管理）加密列表如下图所示

原文：LINK