IEEE 802.11i
IEEE 802.11i: Enhanced security for wireless networks
IEEE 802.11i is an amendment to the IEEE 802.11 wireless network standard that fundamentally improved the security of wireless networks. The standard was ratified in 2004 and later incorporated into the consolidated IEEE 802.11-2007 version.
At its core is the Robust Security Network Association (RSNA), which defines procedures for authentication, key exchange, and encryption. It was intended to replace the insecure WEP (Wired Equivalent Privacy) protocol, whose protection mechanisms were highly vulnerable to attack.
Key components include:
802.1X and EAP for authentication, particularly in enterprise networks
WPA2-Enterprise, utilizing a central authentication server
WPA2-Personal, which employs a pre-shared network key
AES-CCMP as a modern encryption and data integrity mechanism
TKIP, serving as a transitional solution for legacy devices
During the development of IEEE 802.11i, the Wi-Fi Alliance introduced WPA as an interim security standard. WPA relied primarily on TKIP to ensure compatibility with older wireless hardware. The full implementation of IEEE 802.11i was subsequently designated as WPA2, which uses AES-CCMP as its standard.
Today, TKIP is considered obsolete and should no longer be used. Furthermore, the use of TKIP can restrict modern wireless features and limit data transmission rates. The frequently cited 54 Mbit/s limit is not an inherent property of WPA itself, but rather depends on the specific wireless standard and the hardware in use.
For a long time, IEEE 802.11i served as the technical foundation for secure wireless networking. In current networks, however, at least WPA2 with AES-CCMP - or preferably WPA3 - should be used. WEP and WPA with TKIP are considered obsolete and should be disabled.