RE: WPA problem and eduroam

[Stefan Winter <stefan.winter@xxxxxxxxxx>]

Hi,

> > The recent breakage of the TKIP encyption algorithm suggests
> > to transition to an AES infrastructure in the short to
> > mid-term future.
>
> Why?
>
> I'm struggling to understand what the percieved problems are!

There is a way to compromise TKIP-protected networks to extract data  
and inject forged data. To a fairly little extent, admitted, but still  
there is a weakness in the algorithm. The immediate impact is still  
limited (but far from non-existent), but in the long run, it is  
imaginable that more exploits show up. In order to be prepared for  
that, I do think it makes sense to offer a migration path away from  
TKIP to institutions. Due to the lack of alternatives, the only target  
of such a migration path is AES.

Does that sound sensible to you?

Greetings,

Stefan