ies, claymores, tripwires, and snipers. And mimes. Watch out for the mimes. The Extensible Authentication Protocol is a framework for authentication and a means to offer dynamic WEP keys to wireless devices. Since static WEP keys are easily discovered and cracked, changing them dynamically offers better security. EAP has many versions, including EAP-MD5, EAP-FAST, and EAP-TLS. It also has enhancements in the form of the Lightweight Extensible Authentication Pro- tocol (LEAP) and the Protected Extensible Authentication Protocol (PEAP). Stron- ger types of EAP, such as EAP-TLS, are employed when you are using WPA2 Enterprise security. Chapter 29: Wireless The Temporal Key Integrity Protocol is a group of algorithms designed to enhance WEP in a way that greatly improves key security. With WEP, a single key is used for all encryption. With TKIP, a different key is sent with each packet, making it much more difficult to break. Naturally, a flaw was discovered with TKIP, but it is still a far better option than simple WEP. TKIP should be used on devices that do not have the hardware to support AES-CCMP. TKIP is mandatory when you're using WPA. AES-CCMP AES-CCMP is the abbreviation for Advanced Encryption Standard-CCM (Counter Mode with Cipher Block Chaining Message Authentication Code) Protocol. Yeah, that's a mouthful, but don't worry about all those words. What you need to know is that this is the cipher method to choose if your hardware is capable of using it. Modern Wireless-N devices that have been certified by the WiFi Alliance must be capable of supporting AES-CCMP, as it is required when you're using WPA2. WPA and WPA2 WPA stands for WiFi Protected Access. WPA is based on the IEEE standard 802.11i, and was designed to be a more robust solution to solve the inadequacies of WEP. WPA2 is an even stronger version of WPA, due to the inclusion of AES- CCMP. To use WPA and WPA2, you must include a cipher suite. For WPA, TKIP is required. For WPA2, AES-CCMP must be used. WPA2 is the preferred method of securing wireles