So to it's also called robust security.
It is a secure network, which is a type of association used by power stations to establish authentication
or association between them, and it includes the four way handshake.
Now, if you're not familiar with it, we'll briefly discuss the four way handshake, because it's the
process of exchanging four messages between an access point and the client, and that'll generate some
encryption keys, which can be used to encrypt the actual data sent over wireless signals.
The initial authentication process is carried out either by using a pre shared key piece or an extensible
authentication protocol or Hapoel.
That provides an authentication mechanism to devices wishing to attach to a man or a woman.
So after the authentication, a shared secret key is generated called the Pairwise Master Key PMK.
So once the client as the PMK, it and the AP negotiate a new temporary key called the Pairwise Transient
Key, or PAETEC.
So these temporary keys are created dynamically every time the client connects and is changed periodically,
there were a function of the PMK, which is a random number generated by the AP called an instance,
another random number generated by the client that's called an s nonce and the Mac addresses of the
client and the app.
So the reason the keys are created from so many variables basically ensures that they are unique and
non-reporting.
So the four way handshake access point and client are designed to independently prove their acquaintance
with the pesky PMK without disclosing the key.
So instead of disclosing the key, the access point, the AP and the client encrypt messages that can
only be decrypted using PMK and if the messages are decrypted, they will learn about the PMK.
So for way, handshaking is critical for the protection of PMK, for malicious access points.
So the client never has to tell the PMK to the access point.
Within the handshake.
GTK, or the group Temporal Key, is also used to decrypt multicast and broadcast traffic.
So GTK is the key that is shared between all client devices associated with one access point.
So, yeah, for every access point, there will be a different GTK, which will be shared between its
associated devices.
And then finally, the M.S. session is the first key that is generated either from Hapoel or derived
from PDK authentication.
Wow, I know it's a lot, but once we understand the important keys and how they're generated, while
we can then have a look at the actual four way handshake.
With much deeper understanding, all right, so let's work on a visually.
Let's imagine an access point is configured with a tube and the device is trying to connect to it.
So when the user clicks on the access points aside.
So the access point sends an EPA message with an enhanced random number.
To the device to generate the BTK.
The client device knows the Apple Mac address because it's connected to it.
It has PMK assonance and its own Mac address.
So once it receives Arnotts from the access point, it has all the inputs it needs to create the PAETEC.
So once the device is created, it's PAETEC, it sends out essence, which is needed by the access point
to generate the PDK as well as MISI, which is message integrity check to make sure that the access
point can verify whether the message is corrupted or modified.
All right, so once assonance is received by the AP, it, too, can generate PDK for unicast traffic
encryption.
So then the AP verifies message two by checking Amishi.
And Eveillard It constructs and sends the GTK with another MEAC.
The EPA verifies message three by checking that Mesi and if it's valid, yesterday sends a confirmation
to the AP.
All right, so once the four way handshake is completed successfully.
Now, all unicast traffic will be encrypted with PAETEC and all multicast traffic will be encrypted
via GTK, which was created in the four way handshake process.