PEAP (Protected Extensible Authentication Protocol)

PEAP authenticates the server with a public key certificate and carries the authentication in a secure Transport Layer Security (TLS) session, over which the WLAN user, WLAN stations and the authentication server can authenticate themselves. Each station gets an individual encryption key. When used in conjunction with Temporal Key Integrity Protocol (TKIP), each key has a finite lifetime.

Cisco Systems, Microsoft and RSA Security are promoting PEAP as an Internet standard. Currently in draft status, the protocol is gaining support and is expected to displace Cisco's proprietary Lightweight Extensible Authentication Protocol (LEAP).

PEAP addresses the shortcomings of 802.11 security, shared key authentication being chief among these. Weaknesses in 802.11 Wired Equivalent Privacy (WEP) allow an attacker to capture encrypted frames and analyze them to determine the encryption key. (In this system, the same shared key is used for both authentication and encryption.) With the shared key, the attacker can decrypt frames or pose as a legitimate user.

Read more about PEAP (Protected Extensible Authentication Protocol): - Wikipedia has more information about PEAP and related protocols in its entry. - Lisa Phifer discusses PEAP and LEAP. - George Ou explains LEAP weaknesses and discusses PEAP's potential to replace it.

Do you have something to add to this definition? Let us know. Send your comments to techterms@whatis.com

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT On-device defenses for mobile malware Mobile on-device defenses may be relatively new products, but they extend traditional desktop security best practices out to your mobile workforce. Sybase adds antivirus and firewall to mobile management suite Mobile antivirus and firewall features have been added to Sybase iAnywhere's Afaria mobile management and security suite. Detecting rogue mobile devices on your network Learn about tools and techniques that can help you detect rouge mobile devices that could connect to your network without your knowledge.

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary screaming cell phone  (SearchMobileComputing.com) A screaming cell phone is a cellular telephone that is programmed to emit a noise like human screaming. (Continued) Stratellite  (SearchMobileComputing.com) A Stratellite is a rigid framed airship that hovers in a fixed position in the lower stratosphere and carries one or more repeaters to create wireless...