Cited by 159Advanced Authentication Protocols SecurityWireless Networks and ProtocolsSecurity in Wireless Sensor Networks

Analysis of the 802.11i 4-way handshake

He, Changhua, Mitchell, John C.·2004·Proceedings of the 3rd ACM workshop on Wireless security

Abstract

802.11i is an IEEE standard designed to provide enhanced MAC security in wireless networks. The authentication process involves three entities: the supplicant (wireless device), the authenticator (access point), and the authentication server (e.g., a backend RADIUS server). A 4-Way Handshake must be executed between the supplicant and the authenticator to derive a fresh pairwise key and/or group key for subsequent data transmissions.We analyze the 4-Way Handshake protocol using a finite-state verification tool and find a Denial-of-Service attack. The attack involves forging initial messages from the authenticator to the supplicant to produce inconsistent keys in peers. Three repairs are proposed; based on various considerations, the third one appears to be the best. The resulting improvement to the standard, adopted by the 802.11 TGi in their final deliberation, involves only a minor change in the algorithm used by the supplicant.

Integrity signals

Registry

Crossref · 10.1145/1023646.1023655

Cites

13 of 13 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

This paper’s full text isn’t openly available, so its claims and self-check weren’t run. The registry and citation checks still apply.

Cites

Flagged first, then by citations

1 of the 14 references couldn’t be matched to a known paper.

Cited by

Sorted by citations

Authors
He, C., & Mitchell, J. C.
Affiliations
Stanford University (US)
Venue
Proceedings of the 3rd ACM workshop on Wireless security
Publisher
ACM
Published
2004-10
Pages
43-50
OpenAlex
W2145994227
Cited by
159
References
14
Citations by year
2024: 2 · 2023: 4 · 2022: 5 · 2021: 2 · 2020: 4 · 2019: 4 · 2018: 7 · 2017: 7 · 2016: 1 · 2015: 5 · 2014: 4 · 2013: 14 · 2012: 10
FWCI
4.59
Type
conference paper
Language
en
Open access
closed
Locations
Workshop on Wireless Security (publishedVersion)
Topics
  • Physical Sciences › Computer Science › Computer Networks and Communications › Advanced Authentication Protocols Security
  • Physical Sciences › Computer Science › Computer Networks and Communications › Wireless Networks and Protocols
  • Physical Sciences › Computer Science › Computer Networks and Communications › Security in Wireless Sensor Networks
Keywords
IEEE 802.11i, 4-way handshake, WPA, wireless network authentication, denial-of-service attacks, finite-state verification, pairwise keys, group key, supplicants, radius

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review