What is the right way to secure adhoc networks? WPA_NONE is a cruel hack (doesn’t work most of the time, discards important packets, ..), WEP is not secure and Open… open is open. IPSec is a level to high. Does there exists something which works under linux and wifi?
migrated from stackoverflow.com Feb 17 '10 at 15:58
This question came from our site for professional and enthusiast programmers.
Why is IPSec too high-level ?
If you use a common shared key, and one of your nodes is malicious, the whole system gets compromised. You probably want asymmetric cryptography, so that nodes cannot impersonate each other.
IPSec will allow you to issue individual certificates to your nodes, and you can also use AH mode to get authenticated broadcasts.
I don't know of any protocol that would allow both confidential broadcast and resistance to an inside attacker.
If you can't use a central AP, best bet with current COTS technology is to setup an IPsec tunnel between the hosts like a mesh.
If they are an application specific network then I would move towards using something like OpenSSL secure sockets to just secure the application communication (if you have that access).
Or invest in an AP that can do your WPA2 and call it a day.