Encrypting Management Frames

Slides:

Advertisements

Similar presentations

Doc.: IEEE /1106r0 Submission September 2012 Osama Aboul-Magd, Huawei TechnologiesSlide 1 A Short-Header Frame Format Date: Authors:

Advertisements

Doc.: IEEE /0283r0 Submission March 2009 Dan Harkins, Aruba NetworksSlide 1 Suggested Changes to the Abbreviated Handshake Date: Authors:

Doc.:IEEE /0365r1 March 2012 Z. Quan, Qualcomm Inc MAC Header Compression Slide 1 Authors:

MAC Header Compression

Microsoft Windows Server 2003 TCP/IP Protocols and Services Technical Reference Slide: 1 Lesson 1 Local Area Network (LAN) Technologies.

Doc.: IEEE /037 Submission March 2000 Duncan Kitchin, Jesse Walker, Intel NIDSlide 1 Proposal for Enhanced Encryption Duncan Kitchin Jesse Walker.

Wireless security & privacy Authors: M. Borsc and H. Shinde Source: IEEE International Conference on Personal Wireless Communications 2005 (ICPWC 2005),

Network Security7-1 Today r Reminder Ch7 HW due Wed r Finish Chapter 7 (Security) r Start Chapter 8 (Network Management)

Doc.: IEEE /684r0 Submission November 2002 Martin Lefkowitz, Trapeze NetworksSlide 1 Extended Keymap ID Martin Lefkowitz Trapeze Networks.

Doc.: IEEE e Submission Project: IEEE P Working Group for Wireless Personal Area Networks (WPANs) Submission Title: [Security.

Doc.: IEEE /0110r6 SubmissionLiwen Chu Etc.Slide 1 Frame Header Compression Date: Authors: Date: March, 2012.

Doc.: IEEE /0110r7 SubmissionLiwen Chu Etc.Slide 1 Frame Header Compression Date: Authors: Date: April, 2012.

Doc.: IEEE /0485r0 Submission May 2004 Jesse Walker and Emily Qi, Intel CorporationSlide 1 Management Protection Jesse Walker and Emily Qi Intel.

SubmissionJoe Kwak, InterDigital1 Simplified 11k Security Joe Kwak InterDigital Communications Corporation doc: IEEE /552r0May 2004.

Doc.: IEEE /1436r0 Submission November 2004 Mike Moreton, STMicroelectronicsSlide 1 L2 Domain Indication Mike Moreton, STMicroelectronics 15 th.

Doc.: IEEE /0537r0 Submission May 2010 Kazuyuki Sakoda, Sony CorporationSlide 1 General frame format comment resolution overview Date:

Doc.: IEEE /2952r2 Submission Dec 2007 L.Chu Etc.Slide 1 Simplified DLS Action Frame Transmission in 11Z Date: Authors:

Doc.: IEEE /552r0 Submission July 2003 Jon Edney, NokiaSlide 1 Protection of Action Frames Jon Edney Nokia

AP Architecture Changes Mike Moreton, STMicroelectronics

Security Enhancement to FTM

Calibration using NDP Vincenzo Scarpa

November 2017 Project: IEEE P Working Group for Wireless Personal Area Networks (WPANs) Submission Title: [AES-256 for ] Date Submitted:

doc.: IEEE /xxxr0 Mike Moreton

Simplifying Implementation of CCMP Mode

Header Compression Date: Authors: May 2012 Month Year

October 2017 Project: IEEE P Working Group for Wireless Personal Area Networks (WPANs) Submission Title: [AES-256 for ] Date Submitted: [17.

AES Mode Choices OCB vs. Counter Mode with CBC-MAC

October 2017 Project: IEEE P Working Group for Wireless Personal Area Networks (WPANs) Submission Title: [AES-256 for ] Date Submitted: [17.

TSN Architecture Mike Moreton, STMicroelectronics

Key Descriptor Version in EAPOL Key Frames

IGTK Switch Announcement

Mesh Frame Format and Addressing

doc.: IEEE <02/139r0> <January 2002> May, 2009

May 2018 Project: IEEE P Working Group for Wireless Personal Area Networks (WPANs) Submission Title: [Considerations on general MAC frame] Date Submitted:

Mesh Frame Formats Date: Authors: June 2007 March 2007

March 2007 doc.: IEEE /0354r0 March 2007

Network Fundamentals – Chapter 7

Enhancements to Mesh Discovery

IGTK Switch Announcement

Mesh Frame Formats Date: Authors: July 2007 March 2007

doc.: IEEE <doc#>

Network Fundamentals – Chapter 7

Beacon Protection Date: Authors: July 2018 July 2018

Beacon Protection Date: Authors: May 2018 January 2018

Security for Measurement Requests and Information

December 2015 Project: IEEE P Working Group for Wireless Personal Area Networks (WPANs) Submission Title: [Security considerations for 15.3e] Date.

January 2010 doc.: IEEE /0825r2 January 2010

Duration/ID field in UL-MU

Section 2: Cryptography

November 2009 doc.: IEEE /0825r0 November 2009

Network Fundamentals – Chapter 7

Jul 12, /12/10 Project: IEEE P Working Group for Wireless Personal Area Networks (WPANs) Submission Title: Frame signaling options for Security.

Mesh Frame Formats Date: Authors: May 2007 March 2007

Network Fundamentals – Chapter 7

<author>, <company>

Network Fundamentals – Chapter 7

May 2018 Project: IEEE P Working Group for Wireless Personal Area Networks (WPANs) Submission Title: [Considerations on general MAC frame] Date Submitted:

Mesh Frame Formats Date: Authors: June 2007 March 2007

Beacon Protection Date: Authors: July 2018 July 2018

Simplified DLS Action Frame Transmission in 11Z

March 2007 doc.: IEEE /0354r1 March 2007

Beacon Protection Date: Authors: May 2018 January 2018

<author>, <company>

Mesh Frame Formats Date: Authors: May 2007 March 2007

Mesh Frame Formats Date: Authors: July 2007 March 2007

WPA Coordination Changes

Mesh Frame Formats Date: Authors: May 2007 March 2007

Network Fundamentals – Chapter 7

Indicating NGV Capabilities in MAC Header

Comment Resolution Motions

Presentation transcript:

Encrypting Management Frames March 2003 Encrypting Management Frames Mike Moreton Synad Technologies Ltd. Mike Moreton, Synad Technologies Ltd.

March 2003 doc.: IEEE 802.11-02/xxxr0 March 2003 Background This submission discusses methods in which some management frames could be encrypted. It doesn’t discuss why you would want to do that. It doesn’t discuss which frames you might want to encrypt. It doesn’t discuss how you would get the key, and how you would choose which cipher suite to use. It’s just looking at techniques that could be used in other proposals. Mike Moreton, Synad Technologies Ltd. Mike Moreton, Synad Technologies Ltd.

Frame Control field includes the WEP bit March 2003 Management frames use the same header as data frames (without the Address4 field). Frame Control field includes the WEP bit indicates if frame is encrypted. All management frames have a payload. Encrypt it just like a data payload. Problem : MIC does not cover frame sub-type – would need to change it to do this for non-data frames. Frame Control Duration/id Address 1 Address 2 Address 3 Sequence Control Address 4 Frame Body Mike Moreton, Synad Technologies Ltd.

Would Legacy Hardware Support This? March 2003 Would Legacy Hardware Support This? Likely implementations of receiving are: WEP bit determines whether to decrypt or not, ignore the frame type. OK WEP bit ignored for non-authentication management frames. OK as we can decrypt in software Likely implementations for transmitting are similar. There are possible hardware implementations that would have problems, but I haven’t heard of any yet. Mike Moreton, Synad Technologies Ltd.

Alternative Solution - Encapsulation March 2003 Alternative Solution - Encapsulation Don’t use the WEP bit to indicate encryption, instead have a type of action frame that always has an encrypted payload. No legacy hardware problem as encryption/decryption is always in software. Mike Moreton, Synad Technologies Ltd.

MAC Header (type = Action) March 2003 MAC Header (type = Action) Category (TGi) Action (1) Encapsulated Frame FCS CCMP Header Frame Control Frame Body MIC MIC must be extended to cover Category and Action fields as well as the usual parts of the MAC header. 2nd Frame Control field has fields other than type and subtype zeroed. Receiver must forward the entire frame to software. If you don’t Mike Moreton, Synad Technologies Ltd.