10

Which protocol should I use and why?

9 Answers 9

22

My understanding of wireless security protocol strength, starting with most secure:

  • WPA2-AES
  • WPA2-TKIP
  • WPA
  • WEP

Search for WEP cracking and you'll find plenty of tutorials on cracking it in 10 minutes on common PCs. WPA is significantly more difficult to crack, but each version has its weak points. WPA2-AES is considered top of the line last I heard and supported by pretty much all modern routers and OS's.

See these Security Now! past episodes for in-depth explanations:

  • Episode 170, The TKIP Hack
  • Episode 89, Even More Badly Broken WEP
1
  • 1
    AES is very secure. If AES ever becomes unsecure, wireless security will be the least of our problems =) May 10, 2010 at 8:24
18

WEP if you want to get hacked.

WPA if you don't.

1
  • 5
    And WPA2 is significantly better than WPA.
    – Richard
    May 13, 2009 at 14:21
9

use WPA2 or WPA

Here is furthere reading on this

Here are a few reasons why use WPA over WEP

WPA vs WEP

3

At this point there is no good reason to use WEP outside lessons on hacking. WPA is easier to use, safer, and standard on all clients that you'll encounter.

2

As long as all of your wireless client devices (phones, laptops, PDAs, etc.) support it, use WPA2 with AES encryption instead of WEP.

If you have users with old driver software, operating systems, and wireless cards, you may be limited in what you can do. Most devices that originally supported only WEP can be upgraded via software to support WPA with TKIP, but they may not be able to support WPA with AES or WPA2 with AES.

There are lots of old special-purpose devices out there that may only support WEP. For those legacy devices, you may want to create a separate SSID and VLAN along with super-strict firewall policies.

For personal use, WEP with a "closed network" (where the SSID is not broadcast in beacon frame) is enough to say "this isn't a public network" to keep your honest neighbors from hopping onto your network. It won't keep hackers out, but you are probably more vulnerable to the latest worm/virus than someone trying to hack into your home computer from within a few hundred feet of your house. :)

For office use, you should use WPA2-PSK+AES (pre-shared key) with a strong passphrase at the least. Ideally, you will be able to use "WPA2 Enterprise", which means that you use something more secure and manageable than a shared secret (your domain credentials, a smart card, one-time password, or client certificate) to get onto the network. This will require a RADIUS server and some kind of centralized authentication system.

0

It depends on the devices you want to connect to your computer and the standards that they support. If even one of the devices you need uses WEP, you'll need to either set up your router for WEP (and pray that no one preys on you) or buy a new device with the same functionality that supports WPA (which I personally recommend, if you can afford it).

0

WPA is also easier to remember your shared secret. What do you want to try to remember or look up when new people come onto your network.

A key that is 0-9 and a-f or a WPA shared key that can be any phrase you want to create.

0

WPA every time... in regards to WEP, in the words of the late, great Bill Hicks, "There's harder sh*t on the streets of New York City!"

0

WEP should never be used again - it is so obsolete that it can be cracked in seconds: [link text][1]

[1]: http://www.think-security.com/wireless-wep-insecurity/"WEP insecurity"

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .