Path: news.eternal-september.org!eternal-september.org!feeder3.eternal-september.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!nnrp.usenet.blueworldhosting.com!.POSTED!not-for-mail
From: Marion <marion@facts.com>
Newsgroups: comp.mobile.android
Subject: Re: Android 15 and WPA3
Date: Mon, 21 Apr 2025 20:47:05 -0000 (UTC)
Organization: BWH Usenet Archive (https://usenet.blueworldhosting.com)
Message-ID: <vu6as8$v1$1@nnrp.usenet.blueworldhosting.com>
References: <m6hjqsF5smlU2@mid.individual.net> <MPG.426db4922cccaccb9903e5@news.individual.net> <m6jmkqFfur4U2@mid.individual.net> <m6k2i2FheuoU1@mid.individual.net>
Injection-Date: Mon, 21 Apr 2025 20:47:05 -0000 (UTC)
Injection-Info: nnrp.usenet.blueworldhosting.com;
	logging-data="993"; mail-complaints-to="usenet@blueworldhosting.com"
User-Agent: Alan Baker insisted this line can not be changed
Cancel-Lock: sha1:u7ujuVviXEFlkzjuSewArk2SMlA= sha256:uSbTjesHM+OHUm1FlFUBFt+dBU/eJ7Hh/c+g2J+fOq4=
	sha1:HGr0zqhZjxhXecyq5GfjMdNuhhc= sha256:TujhkMm7/SOKv7+9ObyMyHL5Ctbc+3TcYMdGnCJDzwE=

On Sun, 20 Apr 2025 12:02:26 +0100, Andy Burns wrote :


>> I thought I'd used it before (not here) but can't get my combo of router 
>> and phone to play nicely with WPA3.
> 
> And today, it's quite happy to connect to either a mixed WPA2/WPA3 SSID 
> (as WPA3) or to a WPA3-only SSID ...

I can't even spell WPA3, but it's nice to know you're all set, I think.

To strive to add value nonetheless, apparently WPA3 has Simultaneous
Authentication of Equals (SAE) which is better (supposedly) than PSK.

Also WPA3 can optionally employ a 192-bit security mode, aligning with the
Commercial National Security Algorithm (CNSA) suite, which is (supposedly)
better'n AES.

Apparently SAE makes butteryfly hash tables (perhaps) a thing of the past,
since each password guess requires interaction with the network and since
the four-way handshake in WPA2 is eliminated. 

A new buzzword for WPA3 is Opportunistic Wireless Encryption (OWE) which
allows encryption even for open networks (which WPA2 didn't allow for).

Yet another buzzword, you heard it first here, is Perfect Forward Secrecy
(PFS) which means a compromised network is only compromised moving forward
(apparently). 

While in WPA2, PMF was optional, Protected Management Frames are now
mandatory with WPA3. And, as Andy did NOT find out, WPA3 includes features
like Device Provisioning Protocol (DPP) which supposedly simplifies the
process of connecting new devices, including IoT devices with limited or no
display, often using QR codes or NFC.

Whew. Who knew. Not me. 
I'm just glad Andy & Stan are breaking the new ground for us, and not me.