Doubt about WPA and WPA2

[Jouni Malinen]

On Fri, Dec 14, 2007 at 06:47:29AM +0530, Raghavendra. S wrote:

>    I read some where that only WPA2 has capability to use AES/CCMP
> encryption. But I saw few Access Points which provide an option to
> configure WPA1 to use either of TKIP or CCMP/AES, can any body tell me
> why?

Wi-Fi Alliance did not certify WPA with CCMP (this is only included in
WPA2 certification tests). However, it is possible to use CCMP with WPA
and many implementations support this configuration.

> They option to configure AP, with PSK-Mixed/WPA-Mixed/WPA2-Mixed, here
> in all three cases user can configure encryption types as one of AES,
> TKIP and (AES+TKIP), please tell what it means?

I'm not sure what the "Mixed" is referring to here, but as far as
encryption options are concerned, AES would mean enabling only CCMP,
TKIP would mean only TKIP, and AES+TKIP would mean that clients can
select to use either CCMP or TKIP for unicast packets (TKIP would be
used for multicast/broadcast).
 
-- 
Jouni Malinen                                            PGP id EFC895FA