WEP

As explained in Acing the CCNA Exam: Volume 2 Advanced Networking and Security

WEP is an obsolete IEEE 802.11 wireless security protocol that provides authentication, confidentiality, and integrity through a shared static key and RC4 encryption.

Wired Equivalent Privacy (WEP) is the original IEEE 802.11 wireless security protocol. It aimed to provide wired-equivalent privacy through authentication, encryption, and integrity protection, but vulnerabilities made it obsolete and unsafe for current use. section 20.1.2 section 20.3

WEP’s core mechanisms are:

• Open System Authentication exchanges an authentication request and response without credentials; the access point generally approves valid requests. section 20.1.2
• Shared Key Authentication configures the same static WEP key on the access point and client. The access point sends an unencrypted challenge phrase, which the client encrypts and returns; the access point decrypts and compares it. section 20.1.2 section 20.5
• WEP uses RC4 to encrypt wireless messages and an integrity check value (ICV), a checksum derived from the message, to detect alteration. section 20.5

Shared-key challenge

A client requests authentication, receives a plaintext challenge, encrypts it with the shared WEP key, and returns the ciphertext. Matching decrypted text allows the access point to accept the client. section 20.1.2

Figure 20.3 WEP Shared Key Authentication involves exchanging a challenge phrase and encrypting/decrypting it with a shared WEP key.

View the challenge-response sequence used by WEP Shared Key Authentication. section 20.1.2

How Acing the CCNA Exam: Volume 2 Advanced Networking and Security covers it

How deep it goes

Explains authentication exchanges, RC4 encryption, and ICV integrity checks, but stops short of detailed vulnerability analysis.

Examples

Uses Open System authentication and a Shared Key challenge phrase to illustrate WEP’s authentication modes.

What it assumes

Assumes basic authentication, confidentiality, integrity, and wireless association concepts.

What you can do after

Evaluate WEP’s authentication and protection mechanisms and recognize its obsolete security status.

How it connects

Connects WEP with IEEE 802.11, authentication, confidentiality, integrity, RC4, ICV, WPA, WPA2, and WPA3.

liveBookmanning.com

Read Acing the CCNA Exam: Volume 2 Advanced Networking and Security on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  Hacking CryptographyWEP is an obsolete wireless-network security standard that used RC4-based encryption and was vulnerable to cryptographic attacks.

Compare how 2 books explain WEP →

Related concepts

• RC4uses · RC4 is a stream-cipher algorithm that generates a pseudorandom keystream from a variable-length secret key using a permutation-based internal state.
• WPAalternative to · WPA is a family of wireless security standards and protocols that protect communications between Wi-Fi devices and access points.
• encryptionimplements · Encryption is the cryptographic transformation of readable data into ciphertext to conceal its contents, reversible through decryption with appropriate information.
• authenticationuses · Authentication is the process of establishing or verifying the identity of a user, service, device, or other communicating entity.
• data integrityimplements · Data integrity is the property that data remains accurate, complete, consistent, and valid, with changes made only through authorized actions.
• TKIPincludes · TKIP is a wireless security protocol that uses per-packet key mixing and integrity checks to improve the security of WEP-compatible hardware.

This explainer was generated by Manning's knowledge graph from the text of Acing the CCNA Exam: Volume 2 Advanced Networking and Security. The section links point to the parts of the book it draws on.