Some Remarks on the TKIP Key Mixing Function of IEEE 802.11i  

作　　者：韩玮 郑东 陈克非 

机构地区：[1]Department of Computer Science & Engineering,Shanghai Jiaotong University,Shanghai 200240,China [2]National Laboratory for Modern Communications,Chengdu 610041,China

出　　处：《Journal of Shanghai Jiaotong university(Science)》2009年第1期81-85,共5页上海交通大学学报（英文版）

基　　金：the National Laboratory for Modern Communications(No.51436050304JW0317);the National Natural Science Foundation of China(No.60573030)

摘　　要：Temporal key integrity protocol （TKIP） is a sub-protocol of IEEE 802.11i. TKIP remedies some security flaws in wired equivalent privacy （WEP） protocol. TKIP adds four new algorithms to WEP： a message integrity code （MIC） called Michael, an initialization vector （IV） sequencing discipline, a key mixing function and a reeying mechanism. The key mixing function, also called temporal key hash, de-correlates the IVs from weak keys. Some cryptographic properties of the substitution box （S-box） used in the key mixing function are investigated in this paper, such as regularity, avalanche effect, differ uniform and linear structure. Moen et al pointed out that there existed a temporal key recovery attack in TKIP key mixing function. In this paper a method is proposed to defend against the attack, and the resulting effect on performance is discussed.Temporal key integrity protocol(TKIP) is a sub-protocol of IEEE 802.11i.TKIP remedies some security flaws in wired equivalent privacy(WEP) protocol.TKIP adds four new algorithms to WEP:a message integrity code(MIC) called Michael,an initialization vector(IV) sequencing discipline,a key mixing function and a re-keying mechanism.The key mixing function,also called temporal key hash,de-correlates the IVs from weak keys.Some cryptographic properties of the substitution box(S-box) used in the key mixing function are investigated in this paper,such as regularity,avalanche effect,differ uniform and linear structure.Moen et al pointed out that there existed a temporal key recovery attack in TKIP key mixing function.In this paper a method is proposed to defend against the attack,and the resulting effect on performance is discussed.

关 键 词：wireless local area network （WLAN） temporal key integrity protocol （TKIP） substitution box （S- box） 

分 类 号：TN925.93[电子电信—通信与信息系统] TQ051.72[电子电信—信息与通信工程]