CCMP secures wireless LAN traffic by providing both data encryption and integrity protection. It is associated with IEEE 802.11i and WPA2, replacing the weaker RC4-based approach used by WEP and TKIP. section 20.3.2 section 20.5
CCMP uses AES in counter mode for encryption: an encrypted counter value changes for each data block, producing a unique encryption basis. CBC-MAC supplies a stronger integrity checksum than TKIP’s MIC. Counter-mode internals are outside the stated CCNA exam scope. section 20.3.2
Important comparisons:
- WEP and TKIP use RC4, whereas CCMP uses AES. section 20.3.2
- WPA3 uses GCMP, which supports AES counter mode with 128-bit or 256-bit keys; CCMP uses 128-bit keys. section 20.5
