Difference between open authentication and WPA

Can somebody explain the fundamental difference between "Open
Authentication" and WPA?

Thanks.

KAL wrote:
> Can somebody explain the fundamental difference between "Open
> Authentication" and WPA?
>

If it's OPEN there is no authentication.



--
Mike Vore
http://www.OhMyWoodness.com
http://mike.vorefamily.net/twr

On Tue, 27 Jun 2006 21:38:47 GMT, mike vore <(E-Mail Removed)> wrote:

>KAL wrote:
>> Can somebody explain the fundamental difference between "Open
>> Authentication" and WPA?
>>
>
>If it's OPEN there is no authentication.

Ummm, sorta.

WPA includes 802.1x authentication as manditory. 802.1x is a
replacement for the previous open authentication and shared key
authentication.

For WEP, not WPA, encryption, there is either open authentication or
shared-key authentication. Open authentication is a nice way of
saying no authentication. Shared key authentication uses the WEP key
to create a hash code used to authenticate the user. Unfortunately,
shared key authentication has enough information in the hashed packets
to recover the original WEP key and is therefore considered to be a
security problem. In this case, open authentication is considered
more secure.

However, using WPA eliminates the authentication issue as the built in
802.1x solves the security problems.

Fun reading on shared authentication security:
WEPWedgie
http://www.informit.com/guides/conte...eqNum=194&rl=1

--
# Jeff Liebermann 150 Felker St #D Santa Cruz CA 95060
# 831-336-2558 (E-Mail Removed)
# http://802.11junk.com (E-Mail Removed)
# http://www.LearnByDestroying.com AE6KS