WPA3™ Specification v3.0
© 2020 Wi-Fi Alliance. All Rights Reserved.
Used with the permission of Wi-Fi Alliance under the terms as stated in this document.
Page 3 of 30
Table of contents
1 INTRODUCTION .......................................................................................................................................................... 5
1.1 Scope ............................................................................................................................................................ 5
1.2 References .................................................................................................................................................... 5
1.3 Definitions and acronyms .............................................................................................................................. 6
1.3.1 Shall/should/may/might word usage ................................................................................................ 6
1.3.2 Conventions ..................................................................................................................................... 6
1.3.3 Definitions ........................................................................................................................................ 6
1.3.4 Abbreviations and acronyms ............................................................................................................ 6
2 WPA3-PERSONAL ....................................................................................................................................................... 8
2.1 Modes of operation ....................................................................................................................................... 8
2.2 WPA3-Personal only mode ........................................................................................................................... 8
2.3 WPA3-Personal transition mode ................................................................................................................... 8
2.4 Additional Requirements on WPA3-Personal modes ................................................................................... 8
3 WPA3-ENTERPRISE ................................................................................................................................................... 9
3.1 Modes of operation ....................................................................................................................................... 9
3.2 WPA3-Enterprise only mode ......................................................................................................................... 9
3.3 WPA3-Enterprise transition mode ................................................................................................................. 9
3.4 Additional Requirements on WPA3-Enterprise modes ................................................................................. 9
3.5 WPA3-Enterprise 192-bit mode .................................................................................................................... 9
4 WPA3 FAST BSS TRANSITION ................................................................................................................................ 11
4.1 STA AKM preference order ......................................................................................................................... 11
4.1.1 Personal modes ............................................................................................................................. 11
4.1.2 Enterprise modes ........................................................................................................................... 11
5 SERVER CERTIFICATE VALIDATION ...................................................................................................................... 12
5.1 Failure Conditions for Server Certificate Validation .................................................................................... 12
5.2 Support for User Override of Server Certificate .......................................................................................... 12
5.3 Criteria to disable UOSC ............................................................................................................................. 12
5.3.1 TOD Policies .................................................................................................................................. 12
5.3.2 Additional Consideration on TOD Policies ..................................................................................... 13
6 SAE-PK ....................................................................................................................................................................... 14
6.1 Background ................................................................................................................................................. 14
6.2 SAE-PK overview ........................................................................................................................................ 14
6.3 Credential generation procedure ................................................................................................................ 15
6.4 Authentication using SAE-PK ..................................................................................................................... 16
6.5 Modes of operation ..................................................................................................................................... 19
6.5.1 AP operation .................................................................................................................................. 19
6.5.2 STA operation ................................................................................................................................ 19
6.6 Security considerations ............................................................................................................................... 20
6.6.1 General .......................................................................................................................................... 20
6.6.2 Resistance to preimage attacks ..................................................................................................... 21
6.6.3 Resistance to downgrade .............................................................................................................. 22
6.7 SAE-PK element ......................................................................................................................................... 22
7 WIFI URI ..................................................................................................................................................................... 24
7.1 URI format ................................................................................................................................................... 24
7.2 WIFI URI device support ............................................................................................................................. 24
7.3 URI examples .............................................................................................................................................. 25
8 TRANSITION DISABLE INDICATION ........................................................................................................................ 26
9 PRIVACY EXTENSION MECHANISMS ..................................................................................................................... 28
9.1 Randomized MAC address ......................................................................................................................... 28
9.1.1 Composition of a randomized MAC address ................................................................................. 28
9.1.2 Authentication and Association ...................................................................................................... 28
9.1.3 Active Scanning Procedures .......................................................................................................... 28
评论0