liveBook · Manning

CCMP

As explained in Acing the CCNA Exam: Volume 2 Advanced Networking and Security

CCMP is an IEEE 802.11 wireless security protocol that combines AES counter-mode encryption with CBC-MAC-based message authentication.

CCMP secures wireless LAN traffic by providing both data encryption and integrity protection. It is associated with IEEE 802.11i and WPA2, replacing the weaker RC4-based approach used by WEP and TKIP. section 20.3.2 section 20.5

CCMP uses AES in counter mode for encryption: an encrypted counter value changes for each data block, producing a unique encryption basis. CBC-MAC supplies a stronger integrity checksum than TKIP’s MIC. Counter-mode internals are outside the stated CCNA exam scope. section 20.3.2

Important comparisons:

  • WEP and TKIP use RC4, whereas CCMP uses AES. section 20.3.2
  • WPA3 uses GCMP, which supports AES counter mode with 128-bit or 256-bit keys; CCMP uses 128-bit keys. section 20.5

How Acing the CCNA Exam: Volume 2 Advanced Networking and Security covers it

How deep it goes
Explains AES counter mode and CBC-MAC, but defers counter-mode details beyond the CCNA exam scope.
What you can do after
Evaluate CCMP against WEP, TKIP, and GCMP by comparing encryption algorithms and integrity mechanisms.
How it connects
Connects IEEE 802.11i, WPA2, AES, CBC-MAC, WEP, TKIP, and GCMP.

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Acing the CCNA Exam: Volume 2 Advanced Networking and Security. The section links point to the parts of the book it draws on.