AES

The Advanced Encryption Standard (AES) defines an encryption algorithm in FIPS PUB 197. For WPA and WPA2, the AES cipher suite used is AES-CCMP, as specified in the IEEE 802.11i specification and RFC 3610.

802.11 miniport drivers that support WPA2 must support AES. Support for AES is optional for drivers that support WPA.

The AES-CCMP cipher suite uses a 128-bit key for encryption and decryption.

The IEEE 802.11i specification defines the following key types for the AES-CCMP cipher suite:

  • Pairwise key
    This key is used for all packets sent by the device, including unicast and multicast/broadcast packets. This key is also used for all unicast packets received by the device.

  • Group key
    This key is used for all multicast/broadcast packets received by the device. A group key can also be used to send and receive unicast packets. The device must support a minimum of four group keys.

AES keys are added to the driver through OID_802_11_ADD_KEYand removed through OID_802_11_REMOVE_KEY.

 

 

Send comments about this topic to Microsoft