40
10
10.
Glossary
-
PEAP:
Protected Extensible Authentication Protocol is a two-phase
authentication like TLS. In the first phase the Authentication Server
is authenticated to the
Supplicant
. Using TLS, a secure channel is
established through which any other EAP-Type can be used to
authenticate the
Supplicant
to the
Authentication Server
during
the second phase. A certificate is only required at the
Authentication Server
.
PEAP
also supports identity hiding where
the
Authenticator
is only aware of the anonymous username used
to establish the TLS channel during the first phase but not the
individual user authenticated during the second phase.
-
SSID:
Name of wireless network.
-
TLS: TLS
is an EAP-Type for authentication based upon X.509
certificates. Because it requires both the
Supplicant
and the
Authentication Server
to have certificates, it provides explicit
Mutual Authentication
and is resilient to man-in-the-middle attacks.
After successful authentication a secure TLS link is established to
securely communicate a unique session key from the
Authentication Server
to the
Authenticator
.
-
WPA:
Wi-Fi Protected Access is a replacement security standard for
WEP
. It is a subset of the IEEE 802.11i standard being developed.
WPA
makes use of
TKIP
to deliver security superior to WEP. 802.1X
access control is still employed. The
Authentication Server
provides the material for creating the keys.
