高通WLAN框架学习（22）-- WPA3

已于 2023-03-17 10:50:01 修改
阅读量1.5k 收藏 3
点赞数 1
分类专栏： WIFI 文章标签： 学习 p2p debian
于 2022-05-16 17:10:07 首次发布
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/weixin_47456647/article/details/124803586
版权

WPA3提供了更健壮的安全保护，研究表明WPA2不够安全。

WPA3具有以下技术，提高了安全性:

■ Opportunistic Wireless Encryption (OWE)

□更换开放非加密网络。

■ Simultaneous Authentication of Equals (SAE)

□替换WPA2-PSK，减少PSK受到的攻击。

■ Device Provisioning Protocol (DPP)

□更换WPS，以减轻安全缺陷。

■ Support for GMAC-256

□移至一致密码术(GCM和ECC)，与802.11ac安全对齐。

23.1 Opportunistic wireless encryption

OWE（Opportunistic Wireless Encryption，机会性无线加密）是新一代Wi-Fi（WiFi）加密协议WPA3在开放认证方式（Open）基础上提出的一种增强型开放网络认证方式（Enhanced Open）。基于OWE认证的开放式Wi-Fi网络中，用户无需输入密

了解本专栏 订阅专栏 解锁全文 超级会员免费看
专业开发者
关注
  • 1
    点赞
  • 踩
  • 3
    收藏
    觉得还不错? 一键收藏
  • 打赏
    打赏
  • 0
    评论
专栏目录
订阅专栏
Device Provisioning Protocol v1.0
12-05
Table of contents 1 INTRODUCTION .......................................................................................................................................................... 8 1.1 Scope ............................................................................................................................................................ 8 1.2 References.................................................................................................................................................... 8 1.3 Definitions and acronyms............................................................................................................................ 10 1.3.1 Shall/should/may/might word usage .............................................................................................. 10 1.3.2 Conventions ................................................................................................................................... 10 1.3.3 Abbreviations and acronyms.......................................................................................................... 11 1.3.4 Definitions ...................................................................................................................................... 12 1.3.5 Symbols ......................................................................................................................................... 13 1.4 Architecture ................................................................................................................................................. 14 1.5 Device roles ................................................................................................................................................ 14 1.5.1 Authentication roles........................................................................................................................ 14 1.5.2 Configurator delegation.................................................................................................................. 15 1.6 Security considerations............................................................................................................................... 15 1.6.1 Overview ........................................................................................................................................ 15 1.6.2 Threat profile .................................................................................................................................. 15 1.6.3 Trust model .................................................................................................................................... 18 2 DPP PROTOCOL USAGE.......................................................................................................................................... 20 2.1 Overview ..................................................................................................................................................... 20 2.2 Infrastructure setup and connectivity .......................................................................................................... 20 2.2.1 AP configuration............................................................................................................................. 20 2.2.2 STA configuration........................................................................................................................... 20 2.2.3 Infrastructure connectivity .............................................................................................................. 20 2.2.4 Message flows for infrastructure connectivity ................................................................................ 20 2.3 Wi-Fi Direct ................................................................................................................................................. 23 2.3.1 Establishing a P2P group using DPP............................................................................................. 24 2.3.2 P2P Group operation ..................................................................................................................... 26 3 SECURITY.................................................................................................................................................................. 27 3.1 Properties.................................................................................................................................................... 27 3.2 Public key cryptography.............................................................................................................................. 27 3.2.1 Supported public key cryptosystem ............................................................................................... 27 3.2.2 Notation.......................................................................................................................................... 27 3.2.3 Cryptographic suites ...................................................................................................................... 28 3.2.4 Point representation....................................................................................................................... 28 4 DATA STRUCTURES................................................................................................................................................. 29 4.1 Public keys .................................................................................................................................................. 29 4.2 Connectors.................................................................................................................................................. 29 4.3 DPP Configuration object............................................................................................................................ 30 4.3.1 Wi-Fi Technology ........................................................................................................................... 30 4.3.2 DPP Discovery ............................................................................................................................... 30 4.3.3 DPP Credential .............................................................................................................................. 30 5 BOOTSTRAPPING OF TRUST.................................................................................................................................. 32 5.1 Overview ..................................................................................................................................................... 32 5.2 Bootstrapping information ........................................................................................................................... 32 5.2.1 Bootstrapping information format................................................................................................... 32 5.3 Scanning a QR code................................................................................................................................... 33 5.4 NFC............................................................................................................................................................. 34 5.4.1 Overview ........................................................................................................................................ 34 5.4.2 NFC Connection Handover............................................................................................................ 35 5.4.3 DPP bootstrapping via NFC URI record ........................................................................................ 37 5.5 Bluetooth ..................................................................................................................................................... 38 5.5.1 Overview ........................................................................................................................................ 38 5.5.2 Responder procedures .................................................................................................................. 40 5.5.3 Initiator procedures ........................................................................................................................ 40 Device Provisioning Protocol Specification v1.0 © 2018 Wi-Fi Alliance. All Rights Reserved. Used with the permission of Wi-Fi Alliance under the terms as stated in this document. Page 4 of 124 5.6 PKEX: Proof of knowledge of a shared code, key, phrase, or word...........................................................41 5.6.1 PKEX preliminaries ........................................................................................................................ 41 5.6.2 PKEX exchange phase .................................................................................................................. 42 5.6.3 PKEX commit-reveal phase ........................................................................................................... 43 6 DPP AUTHENTICATION............................................................................................................................................ 45 6.1 Overview ..................................................................................................................................................... 45 6.2 DPP Authentication protocol ....................................................................................................................... 45 6.2.1 DPP capabilities negotiation .......................................................................................................... 46 6.2.2 DPP authentication request ........................................................................................................... 47 6.2.3 DPP authentication response ........................................................................................................ 47 6.2.4 DPP authentication confirm ........................................................................................................... 49 6.3 DPP Configuration protocol ........................................................................................................................ 50 6.3.1 Overview ........................................................................................................................................ 50 6.3.2 DPP configuration request ............................................................................................................. 50 6.3.3 DPP configuration response .......................................................................................................... 51 6.3.4 DPP Configuration Attributes object .............................................................................................. 51 6.3.5 Connector....................................................................................................................................... 52 6.3.6 DPP Configuration object............................................................................................................... 53 6.4 Network introduction protocol ..................................................................................................................... 55 6.4.1 Introduction .................................................................................................................................... 55 6.4.2 Connector group comparison......................................................................................................... 56 6.5 Network access protocols ........................................................................................................................... 56 7 STATE MACHINES .................................................................................................................................................... 57 7.1 Initiator state machine................................................................................................................................. 57 7.1.1 States ............................................................................................................................................. 57 7.1.2 Events and output .......................................................................................................................... 57 7.1.3 Variables ........................................................................................................................................ 57 7.1.4 Parent process behavior ................................................................................................................ 57 7.1.5 State machine behavior ................................................................................................................. 57 7.2 Responder state machine ........................................................................................................................... 59 7.2.1 States ............................................................................................................................................. 59 7.2.2 Events and output .......................................................................................................................... 59 7.2.3 Variables ........................................................................................................................................ 59 7.2.4 State machine behavior ................................................................................................................. 60 7.3 Configurator state machine......................................................................................................................... 62 7.3.1 States ............................................................................................................................................. 62 7.3.2 Events and output .......................................................................................................................... 62 7.3.3 Variables ........................................................................................................................................ 62 7.3.4 Parent process behavior ................................................................................................................ 62 7.3.5 State machine behavior ................................................................................................................. 62 7.4 Enrollee state machine................................................................................................................................ 64 7.4.1 States ............................................................................................................................................. 64 7.4.2 Events and output .......................................................................................................................... 64 7.4.3 Variables ........................................................................................................................................ 64 7.4.4 State machine behavior ................................................................................................................. 64 7.5 Detailed protocol description....................................................................................................................... 66 7.5.1 DPP bootstrapping......................................................................................................................... 66 7.5.2 DPP authentication exchange........................................................................................................ 66 7.5.3 DPP configuration exchange ......................................................................................................... 68 7.5.4 DPP network introduction exchange.............................................................................................. 69 7.5.5 Network access.............................................................................................................................. 70 8 DPP ATTRIBUTE, FRAME, AND ELEMENT FORMATS .......................................................................................... 71 8.1 DPP attributes ............................................................................................................................................. 71 8.1.1 DPP attribute body field definitions................................................................................................ 72 8.2 DPP frames................................................................................................................................................. 74 8.2.1 DPP Public Action frames.............................................................................................................. 74 8.2.2 DPP Generic Advertisement Service (GAS) frames...................................................................... 78 Device Provisioning Protocol Specification v1.0 © 2018 Wi-Fi Alliance. All Rights Reserved. Used with the permission of Wi-Fi Alliance under the terms as stated in this document. Page 5 of 124 8.3 DPP status and error codes........................................................................................................................ 81 8.4 Network Introduction protocol elements...................................................................................................... 82 8.4.1 Overview ........................................................................................................................................ 82 8.4.2 Network Introduction protocol AKM suite....................................................................................... 82 9 DPP CONFIGURATION BACKUP AND RESTORE.................................................................................................. 83 9.1 Overview ..................................................................................................................................................... 83 9.2 DPP AsymmetricKeyPackage..................................................................................................................... 83 9.3 DPPEnvelopedData .................................................................................................................................... 84 9.3.1 DPPAsymmetricKeyPackage encryption....................................................................................... 86 9.3.2 DPPEnvelopedData decryption ..................................................................................................... 86 9.4 DPP configuration backup .......................................................................................................................... 86 9.5 DPP configuration restore........................................................................................................................... 86 9.6 Enabling multiple Configurators in DPP...................................................................................................... 87 APPENDIX A (INFORMATIVE) TEST VECTORS ............................................................................................................ 88 A.1 Test vectors for DPP Authentication using P-256 for mutual authentication..............................................88 A.2 Test vectors for DPP Authentication using P-256 for Responder-only authentication ...............................91 A.3 Test vectors for DPP Authentication using P-384 for mutual authentication..............................................94 A.4 Test vectors for DPP Authentication using P-521 for mutual authentication..............................................98 A.5 Test vectors for DPP Authentication using Brainpool P-256r1 for mutual authentication ........................103 A.6 Test vectors for DPP Authentication using Brainpool P-384r1 using mutual authentication....................106 A.7 A.7 Test vectors for DPP Authentication using Brainpool P-512r1 for mutual authentication ..................110 APPENDIX B ROLE-SPECIFIC ELEMENTS FOR PKEX............................................................................................... 115 B.1 Role-specific elements for NIST p256 ...................................................................................................... 115 B.2 Role-specific elements for NIST p384 ...................................................................................................... 115 B.3 Role-specific elements for NIST p521 ...................................................................................................... 116 B.4 Role-specific elements for Brainpool p256r1 ............................................................................................ 117 B.5 Role-specific elements for Brainpool p384r1 ............................................................................................ 117 B.6 Role-specific elements for Brainpool p512r1 ............................................................................................ 118 APPENDIX C PKEX TEST VECTOR FOR NIST P256................................................................................................... 119 C.1 Initial state of Initiator and Responder ...................................................................................................... 119 C.2 Initiator generates PKEX Exchange Request frame................................................................................. 119 C.3 Responder processes PKEX Exchange Request frame........................................................................... 120 C.4 Responder generates PKEX Exchange Response frame ........................................................................ 120 C.5 Initiator processess PKEX Exchange Response frame............................................................................ 121 C.6 Initiator generates PKEX Commit/Reveal request.................................................................................... 121 C.7 Responder processes PKEX Commit/Reveal Request frame.................................................................. 122 C.8 Responder generates PKEX Commit/Reveal Response frame................................................................ 123 C.9 Initiator processes PKEX Commit/Reveal Response frame..................................................................... 124
高通camera chi-cdk feature2框架介绍
07-18
高通camera chi-cdk feature2框架介绍 高通Camera Chi-CDK Feature2框架是一个专门为高通camera设计的框架，旨在提高camera应用程序的性能和效率。在本文中，我们将详细介绍Feature2框架的架构、组件、工作流程和...
网络安全入门笔记（共327页），助你步入安全门槛
Spontaneous_0的博客
01-31 363
网络安全入门笔记（共327页），助你步入安全门槛
Wifi通信协议：WEP，WPA，WPA2，WPA3，WPS
最新发布
unravel_tom的博客
06-16 1549
无线安全性是保护互联网安全的重要因素。连接到安全性低的无线网络可能会带来安全风险，包括数据泄露、账号被盗以及恶意软件的安装。因此，利用合适的Wi-Fi安全措施是非常重要的，了解WEP、WPA、WPA2和WPA3等各种无线加密标准的区别也是至关重要的。 WPA（Wi-Fi Protected Access）是用于保护无线网络连接的计算设备内部的安全标准。它由Wi-Fi联盟开发，用来替代原先的无线安全标准WEP（Wired Equivalent Privacy），并在数据加密和用户认证方面表现优越。
WPA3之OWE
neal_hddnwpu的博客
09-14 7052
大概是WIFI联盟的人闲的蛋疼，就折腾出一个WPA3模式。想解决什么问题呢？看到WPA就知道是安全问题。WIFI在链路层设计有加密，但是大家总认为麻烦，比如公共场所上网，还得看看墙上或者桌子上哪里有密码提示。营运商也觉得很烦，于是不知不觉在机场和咖啡店这种地方索性用OPEN的WIFI，采用应用层认证的方式来控制介入。这个方案目前用的好好的，可是联盟的人认为这个是明文的网络，黑客可以抓包来窃取机密，...
802.11协议wifi新加密方式WPA3介绍
热门推荐
头铁的伦的博客
12-04 1万+
当今的wifi安全问题 802.11任务组于2001年开始应用wpa2。当是还没有wifi并且802.11的应用也不像今天一样普遍。这是技术上的第一大步并且wifi以网卡几口的方式嵌入笔记本电脑上。此外，AP是一种单独的设备具有小巧，无法进行复杂运算的设备。 802.11i标准于2004年批准共享秘钥和eap三方server作为加密方式。 当802.11i协议尘埃落定，wifi启用wpa2规则...
四种Wi-Fi安全协议：WEP、WPA、WPA2、WPA3，看完秒懂！
网络技术联盟站
04-28 2788
Wi-Fi安全协议密钥管理方法加密长度使用的协议WEP静态密钥64位或128位WPA动态密钥128位WPA2动态密钥128位或256位使用CCMP（Counter Mode with Cipher Block Chaining Message Authentication Code Protocol）的AES（高级加密标准）WPA3动态密钥（唯一密钥，个性化数据加密）192位和256位使用SAE（同时身份验证）的GCM（Galois-Counter Mode）
wifi连接WPA3加密介绍
szqy00的博客
08-24 1165
WPA3是一项非常重要的无线网络安全改进，旨在提供更强大的加密和更好的网络安全性。它采用先进的密码学算法，增加了密码破解的难度，并提供了更高级别的数据隐私和保护，以确保无线网络的安全性和用户隐私。这增加了数据的隐私和安全性，因为即使攻击者成功解密了一个设备的流量，他们无法轻松地解密其他设备的流量。它是WPA2的继任者，旨在提供更强大的安全性和更好的保护，以满足不断增加的网络威胁。5、192位加密密钥：WPA3支持192位的加密密钥，相对于WPA2的128位密钥，提供了更高级别的安全性。
高通的元宇宙布局-20220331.pdf
04-02
高通的骁龙G3x游戏平台正是针对这一趋势的创新产品，旨在为高端游戏体验和未来的元宇宙应用提供强大的硬件基础。 元宇宙的构建离不开高性能的处理器和高效的通信技术，而这正是高通的核心竞争力。作为全球领先的...
高通5G 3GPP Release-18详情介绍.pdf
01-14
高通5G 3GPP Release-18 详情介绍 高通5G 3GPP Release-18 是一个关键的技术 Release，旨在推动 5G 技术的演进和发展。下面是该 Release 的一些关键知识点： 1. 5G Advanced 演进：高通5G 3GPP Release-18 的主要...
高通写号工具QualcommTool-eMMC-v3.2
01-17
【高通写号工具QualcommTool-eMMC-v3.2】是一款专为高通处理器设计的设备编程工具，主要用于对采用高通芯片的电子设备进行eMMC存储器的写号操作。eMMC（Embedded Multi Media Card）是集成在主板上的多媒体卡，常...
高通音频调试指南-voice
04-23
【高通音频调试指南-voice】是一份由Qualcomm Technologies, Inc.提供的内部机密文档，主要用于指导用户进行音频调试工作，特别是与语音相关的调试。文档涵盖了音频调试的基本流程、关键处理模块及其调试参数，旨在...
Wifi 认证，关联，四次握手（WPA/WPA2/WPA3-SAE）
少歌的博客
03-20 1万+
SAE 采用了“互联网工程任务组(IETF)”RFC7664 规范中定义的 “蜻蜓（Dragonfly）” 握手协议，将其应用于 Wi-Fi 网络以进行基于密码的身份验证。SAE 采用了“互联网工程任务组(IETF)”RFC7664 规范中定义的 “蜻蜓（Dragonfly）” 握手协议，将其应用于 Wi-Fi 网络以进行基于密码的身份验证。站在用户的角度，设备连接这两种协议（WPA2-personal 和 WPA3-SAE）的热点没有任何操作上的区别。其中 四次 eapol key 属于四次握手的过程。
wifi的加密类型梳理
yudelian的博客
02-08 1322
wifi的加密类型梳理
从WiFI渗透攻击到WPA3
qq_55349196的博客
08-27 4543
WiFi从发明到现在已经融入到生活的每个方面，在这个互联网发达的时代，无线网络遍布每个角落。而提供给人们方便的同时也隐藏着安全问题，我们通过了解WLAN的一种技术———Wi-Fi（Wireless-Fidelity），测试其中存在的安全问题，同时也解决WiFi的隐藏问题。.........
WPA3，WPA2，WPA的核心要点
Ankie资深技术项目经理
02-03 2404
Pre-RSNA：WEP （已淘汰，不赘述）Open ：最最基本的，下图为最基本的连接过程：probe，authentication，associationshared key （已淘汰，不赘述）RSNA先经过Open association的过程，然后把port block。然后进行EAP的过程，authentication和key management。如下图。认证主要有2种：1，PSK：Preshared Key，使用最广泛。EAP-TLS。
WPA3
Yy
10-10 6883
1.概述 WPA3在WPA2的基础上，增强了个人和企业网络中的安全保护。WPA3包括下面几种认证方式： WPA3: Simultaneous Authentication of Equals (SAE). WPA3: 192‑bit cryptographic strength security protocol defined in Commercial National Security Algorithm (CNSA) Suite-B. Enhanced Open Feature: Opportun
高通WLAN框架学习
weixin_47456647的博客
05-19 1394
针对高通WLAN框架整理了如下一些文章，大致涵盖了高通WLAN各个知识点，如下： 高通WLAN框架学习（1）- -WIFI的认证和log的抓取_专业开发者的博客-CSDN博客 高通WLAN框架学习（2）- -建立和配置WLAN连接_专业开发者的博客-CSDN博客 高通WLAN框架学习（3）- -WLAN FTM 模式_专业开发者的博客-CSDN博客 高通WLAN框架学习（4 ）- -WLAN-Bluetooth-LTE 共存问题_专业开发者的博客-CSDN博客 高通WLAN框架学习（5 ）- -
Hostapd中DPP的概念
w512的专栏
10-16 1018
Hostapd中关于dpp的概念介绍
高通wlan框架学习(16)-- optimized connectivity experience 优化连接体验
12-13
高通WLAN框架学习中，优化连接体验是一个重要的方面。在无线局域网（WLAN）中，优化连接体验意味着提供更可靠、更稳定以及更高质量的无线连接。 要优化连接体验，首先需要通过选择合适的信道来避免干扰。高通WLAN...
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包

打赏作者

专业开发者

你的鼓励将是我创作的最大动力

¥1 ¥2 ¥4 ¥6 ¥10 ¥20
扫码支付：¥1
获取中
扫码支付

您的余额不足，请更换扫码支付或充值

打赏作者

实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值