Temporal Key Integrity Protocol manages how keys are chosen and switched during the session[s].
TKIP is not used in WPA2 except to make it backwards compatible with early WPA implementations (note the 2003 date in the pasted definition above - WPA2 has been implemented for a few years now).
Advanced Encryption System is a symmetric digital encryption algorithm that uses variable bit lengths. AES as implemented in WPA2 uses CM/CBC-MAC protocol (CCMP). For confidentiality, CCMP uses counter-mode (CM) AES; For authentication and data integrity, CCMP uses cipher block chaining message authentication code (CBC-MAC). 802.11i specifies a 128-bit key for CCMP.
The main noticable difference to the layman is more overhead (i.e. lower overall throughput) using WPA2; The main noticable difference to hackers is it's about impossible to break into. :)
That slightly-lower throughput (about 32 bits/frame overhead) is the price paid for data integrity and real security. If all you need is to keep the neighbors from stealing your bandwidth, WEP is probably going to be good enough. Turn on the time server and logging (and save the logs - they'll zip megs to KB easily) so if the RIAA comes calling you're not on the hook for $200,000+ like that lady in Minnesota.
Main Topics
Browse All Topics
by: GarveyJPosted on 2007-12-19 at 05:52:59ID: 20499477
TKIP is a quick-fix method to quickly overcome the inherent weaknesses in WEP security, especially the reuse of encryption keys. TKIP is involved in the IEEE 802.11i WLAN security standard, and the specification might be officially released by early 2003.
AES (Advanced Encryption Standard), a chip-based security, has been developed to ensure the highest degree of security and authenticity for digital information, wherever and however communicated or stored, while making more efficient use of hardware and/or software than previous encryption standards. It is also included in IEEE 802.11i standard.
So basically, compare with AES, TKIP is a temporary protocol for replacing WEP security until manufacturers implement AES at the hardware level.