Last year, Belgian security researcher Mathy Vanhoef disclosed details of a vulnerability named KRACK, by which hackers can break the security standards of WiFi WPA2, which was known to be secure. Almost every wireless features device was prone to KRACK.
Today, WiFi Alliance the organization that decides WiFi standards, came up with a new standard of WiFi and published the first details about the upcoming WPA3 WiFi protocol.
On the first official draft of the WPA3 WiFi authentication protocol will be available later this year, but the WiFi Alliance teased four major features today that users and hardware vendors should look forward to in the new standard.
Four New Features Coming in WPA3
- The first feature is about security and it's a protection from brute force attacks by blocking the WiFi authentication process after several failed login attempts. These are common features and can be found in many web authentication. This is important as attackers mostly perform dictionary brute-force attacks over WiFi authentication
- The second is the ability to use nearby Wi-Fi-enabled devices as the configuration panel for other devices. For example, a user will be able to use his phone or tablet to configure the WiFi WPA3 options of another device that doesn't have a screen, such as tiny IoT equipment like smart locks, smart light bulbs, and others.
- Now the third and fourth are both related to encryption capabilities. The third is "individualized data encryption," which is a feature that encrypts connections between each device and the router or access point, and the fourth is an improved cryptographic standard that the WiFi Alliance described as "a 192-bit security suite, aligned with the Commercial National Security Algorithm (CNSA) Suite from the Committee on National Security Systems.
As WiFi Alliance had just released the first draft of WPA3, but Linux is always ahead of other OS. Linux's open-source WiFi client already supports the latest WiFi standards, they just have to start in the works.
As of now, new WiFi authentication standards have been announced so it will take some time before users will able to get the device supporting WPA3.